CyberRota Analysis
AI-GeneratedOpen5GS versions up to 2.7.6 are vulnerable due to a flaw in the CER Handler's diam_log_func, which can lead to a reachable assertion and allows for remote exploitation. Organizations using this software should prioritize upgrading to version 2.7.7 to mitigate potential risks, as the exploit is now publicly available. This vulnerability poses a medium severity risk and should be addressed promptly to maintain system integrity.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability was detected in Open5GS up to 2.7.6. Affected is the function diam_log_func of the file lib/diameter/common/init.c of the component CER Handler. The manipulation results in reachable assertion. The attack can be executed remotely. The exploit is now public and may be used. Upgrading to version 2.7.7 is able to address this issue. The patch is identified as c1a803516a3c0485696cb9bcca7a80ad857c7383. It is advisable to upgrade the affected component.