PT-2026-21578 · Free5Gc · Free5Gc Udm

CVE-2025-69250

·

Publicado

2026-02-23

·

Atualizado

2026-03-01

CVSS v3.1

7.5

Alta

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions free5gc UDM versions up to and including 1.4.1
Description The UDM component of free5gc, used for Unified Data Management in 5G mobile core networks, discloses detailed internal error messages to remote clients when processing invalid pduSessionId inputs. This exposure of implementation details can be used for service fingerprinting. All deployments utilizing the UDM Nudm UECM DELETE service may be affected.
Recommendations Apply the patch available in free5gc/udm pull request 76.

Exploit

Correção

Improper Check for Exceptional Conditions

RCE

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-754CWE-20

Identificadores relacionados

CVE-2025-69250
GHSA-6W77-5PQH-83RM

Produtos afetados

Free5Gc Udm