CVE-2025-15532

MEDIUM

Open5GS < 2.7.5 - Denial of Service in Timer Handler

Title source: llm
STIX 2.1

Description

A security flaw has been discovered in Open5GS up to 2.7.5. This issue affects some unknown processing of the component Timer Handler. The manipulation results in resource consumption. The attack may be performed from remote. The exploit has been released to the public and may be used for attacks. The patch is identified as c7c131f8d2cb1195ada5e0e691b6868ebcd8a845. It is best practice to apply a patch to resolve this issue.

References (12)

Core 12
Core References
Third Party Advisory, VDB Entry vdb-entry technical-description
https://vuldb.com/?id.341599
Permissions Required, VDB Entry signature permissions-required
https://vuldb.com/?ctiid.341599
Third Party Advisory, VDB Entry third-party-advisory
https://vuldb.com/?submit.729354
Third Party Advisory, VDB Entry third-party-advisory
https://vuldb.com/?submit.729357
Permissions Required, VDB Entry third-party-advisory
https://vuldb.com/?submit.735340
Permissions Required, VDB Entry third-party-advisory
https://vuldb.com/?submit.735341
Permissions Required, VDB Entry third-party-advisory
https://vuldb.com/?submit.735342
Exploit, Issue Tracking, Vendor Advisory issue-tracking
https://github.com/open5gs/open5gs/issues/4220
Exploit, Issue Tracking, Vendor Advisory issue-tracking
https://github.com/open5gs/open5gs/issues/4221
Exploit, Issue Tracking, Vendor Advisory exploit issue-tracking
https://github.com/open5gs/open5gs/issues/4220#issue-3766066853
Various Sources product
https://github.com/open5gs/open5gs/

Scores

CVSS v3 5.3
EPSS 0.0098
EPSS Percentile 57.5%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

CISA SSVC

Vulnrichment
Exploitation poc
Automatable yes
Technical Impact partial

Details

CWE
CWE-404 CWE-400
Status published
Products (1)
open5gs/open5gs < 2.7.5
Published Jan 17, 2026
Tracked Since Feb 18, 2026