PT-2026-70974 · Open5Gs · Open5Gs
CVSS v3.1
4.3
Medium
| Vector | AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L |
Name of the Vulnerable Software and Affected Versions
Open5GS versions prior to 2.7.7
Description
A remote denial of service issue exists in the HSS Service component. The problem occurs within the
fd msg sess get() function when the Session-Id argument is manipulated.Recommendations
Update Open5GS to a version newer than 2.7.6.
As a temporary workaround, restrict access to the HSS Service component to minimize the risk of remote exploitation.
Exploit
Fix
DoS
Improper Resource Release
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Open5Gs