CyberRota Analysis
AI-GeneratedOpen5GS versions up to 2.7.6 are vulnerable in the HSS Service's fd_msg_sess_get function, where manipulation of the Session-Id argument can lead to a denial of service. This vulnerability can be exploited remotely, potentially disrupting service availability. Organizations using Open5GS should prioritize patching to mitigate the risk of service interruptions.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability has been found in Open5GS up to 2.7.6. Affected by this issue is the function fd_msg_sess_get of the component HSS Service. Such manipulation of the argument Session-Id leads to denial of service. The attack may be performed from remote. The exploit has been disclosed to the public and may be used. The project locked and limited conversation to collaborators.