Description
An issue in O-RAN Near Realtime RIC ric-plt-submgr in the J-Release environment, allows remote attackers to cause a denial of service (DoS) via a crafted request to the Subscription Manager API component.
References (2)
Core 2
Core References
Various Sources
https://lf-o-ran-sc.atlassian.net/browse/RIC-1073
Scores
CVSS v3
7.5
EPSS
0.0039
EPSS Percentile
30.2%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CISA SSVC
Vulnrichment
Exploitation
poc
Automatable
no
Technical Impact
partial
Details
CWE
CWE-400
Status
published
Published
Sep 25, 2025
Tracked Since
Feb 18, 2026