CVE-2025-8800

MEDIUM

open5gs < 2.7.6 - Denial of Service in esm_handle_pdn_connectivity_request

Title source: llm
STIX 2.1

Description

A vulnerability has been found in Open5GS up to 2.7.5. Affected by this issue is the function esm_handle_pdn_connectivity_request of the file src/mme/esm-handler.c of the component AMF Component. The manipulation leads to denial of service. The attack may be launched remotely. Upgrading to version 2.7.6 is able to address this issue. The name of the patch is 701505102f514cbde2856cd2ebc9bedb7efc820d. It is recommended to upgrade the affected component.

References (8)

Core 8
Core References
Third Party Advisory, VDB Entry vdb-entry technical-description
https://vuldb.com/?id.319328
Permissions Required, VDB Entry signature permissions-required
https://vuldb.com/?ctiid.319328
Third Party Advisory, VDB Entry third-party-advisory
https://vuldb.com/?submit.626113
Issue Tracking issue-tracking
https://github.com/open5gs/open5gs/issues/3980

Scores

CVSS v3 5.3
EPSS 0.0054
EPSS Percentile 41.0%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

CISA SSVC

Vulnrichment
Exploitation poc
Automatable yes
Technical Impact partial

Details

CWE
CWE-404
Status published
Products (1)
open5gs/open5gs < 2.7.6
Published Aug 10, 2025
Tracked Since Feb 18, 2026