VulnerabilityModified
CVE-2025-15531
A vulnerability was identified in Open5GS up to 2.7.5.
MEDIUM 5.5EPSS 0.75%
Does this matter?
Lower severity and a low EPSS score (0.75%). Track it; it rarely justifies an emergency change on its own.
Description
A vulnerability was identified in Open5GS up to 2.7.5. This vulnerability affects the function sgwc_bearer_add of the file src/sgwc/context.c. The manipulation leads to reachable assertion. The attack is possible to be carried out remotely. The exploit is publicly available and might be used. The issue report is flagged as already-fixed.
- CVSS 4.0
- 5.5 MEDIUMCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M
- EPSS
- 0.75% probability · 53th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-617
- Affected
- open5gs/open5gs
- Source
- cna@vuldb.com
References
- https://github.com/open5gs/open5gs/
- https://github.com/open5gs/open5gs/issues/4233Exploit, Issue Tracking, Vendor Advisory
- https://github.com/open5gs/open5gs/issues/4233#issue-3776216182Exploit, Issue Tracking, Vendor Advisory
- https://vuldb.com/?ctiid.341598Permissions Required, VDB Entry
- https://vuldb.com/?id.341598Third Party Advisory, VDB Entry
- https://vuldb.com/?submit.729339Third Party Advisory, VDB Entry
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.