PT-2025-2376 · Open5Gs · Open5Gs
CVE-2024-24427
·
Published
2025-01-21
·
Updated
2025-01-22
CVSS v3.1
7.5
High
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions:
Open5GS versions <= 2.6.4
Description:
A reachable assertion in the
amf ue set suci function allows attackers to cause a Denial of Service (DoS) via a crafted NAS packet.Recommendations:
For Open5GS versions <= 2.6.4, update to a version greater than 2.6.4 to resolve the issue.
As a temporary workaround, consider restricting the handling of crafted NAS packets to minimize the risk of exploitation.
Exploit
Fix
DoS
Assertion Failure
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Open5Gs