CyberRota Analysis
AI-GeneratedOpen5GS versions up to 2.7.x are vulnerable due to a use-after-free flaw in the Old AMF Discovery Fallback function, which can be exploited remotely by manipulating the discovery_option argument. This vulnerability poses a high risk as it may allow attackers to execute arbitrary code or crash the service. Organizations using Open5GS should prioritize applying the patch identified as ddd683a35f8aaac2b7b9884a24cd53bddfc65238 to mitigate potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A security flaw has been discovered in Open5GS up to 2.7.x. Affected is the function amf_nnrf_try_old_amf_discovery_fallback of the file src/amf/nnrf-handler.c of the component Old AMF Discovery Fallback. The manipulation of the argument discovery_option results in use after free. The attack may be performed from remote. The patch is identified as ddd683a35f8aaac2b7b9884a24cd53bddfc65238. Applying a patch is advised to resolve this issue.