CVE-2025-52288

Опубликовано: 08 сент. 2025

Источник: nvd

CVSS3: 7.5

EPSS Низкий

Описание

Assertion failure in function ngap_build_downlink_nas_transport in file src/amf/ngap-build.c, the Access and Mobility Management Function (AMF) component, in Open5GS thru 2.7.5 allowing attackers to cause a denial of service or other unspecified impacts via repeated UE connect and disconnect message sequences.

Ссылки

https://github.com/ZHENGHAOHELLO/BugReport/blob/main/CVE-2025-52288
Third Party Advisory
https://github.com/matejGradisar/open5gs/commit/5467da9763c300520f56bfbe0a7f5a7f980ec2f6
Patch
https://github.com/open5gs/open5gs/issues/3862
Exploit
Issue Tracking
https://github.com/open5gs/open5gs/issues/3862#issue-3006335547
Exploit
Issue Tracking
https://github.com/open5gs/open5gs/issues/3862#issuecomment-2853458783
Issue Tracking

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:open5gs:open5gs:*:*:*:*:*:*:*:*

Версия до 2.7.5 (включая)

EPSS

Процентиль: 24%

0.00078

Низкий

7.5 High

CVSS3

Дефекты

CWE-400

Связанные уязвимости

CVE-2025-52288

CVSS3: 7.5

debian

2 месяца назад

Assertion failure in function ngap_build_downlink_nas_transport in fil ...

GHSA-25w6-x449-427j

CVSS3: 7.5

github

2 месяца назад

EPSS

Процентиль: 24%

0.00078

Низкий

7.5 High

CVSS3

Дефекты

CWE-400