CVE-2023-50019

An issue was discovered in open5gs v2.6.6. InitialUEMessage, Registration request sent at a specific time can crash AMF due to incorrect error handling of NudmUECMRegistration response...

CVE-2023-50019

The CVE-2023-50019 entry concerns Open5GS v2.6.6, where an issue in InitialUEMessage leads to an AMF crash due to incorrect error handling of Nudm_UECM_Registration responses. The vulnerability is categorized as a Denial of Service risk with a CVSS v3.1 base score of 5.9 (NETWORK attack vector, H...

PT-2024-13848 · Open5Gs · Open5Gs

Name of the Vulnerable Software and Affected Versions: open5gs version 2.6.6 Description: An issue was discovered in open5gs where SIGPIPE can be used to crash AMF. Recommendations: For open5gs version 2.6.6, as a temporary workaround, consider disabling the use of SIGPIPE until a patch is...

Open5GS 安全漏洞

Open5GS is an open source implementation in C of 5G Core and Epc, the core network of the Lte/Nr network. Open5GS suffers from a denial of service vulnerability that can be exploited by an attacker to cause AMF to crash...

CVE-2023-50020

An issue was discovered in open5gs v2.6.6. SIGPIPE can be used to crash AMF...

CVE-2023-50019

An issue was discovered in open5gs v2.6.6. InitialUEMessage, Registration request sent at a specific time can crash AMF due to incorrect error handling of NudmUECMRegistration response...

Open5GS Denial of Service Vulnerability (CNVD-2023-96086)

Open5GS is an open source implementation in C of 5G Core and Epc, the core network of the Lte/Nr network. A denial of service vulnerability exists in Open5GS version 2.4.10 and earlier due to an invalid pointer release flaw in the ogssbimessagefree function, which can be exploited by an attacker ...

Open5GS has an unspecified vulnerability (CNVD-2025-18587)

Open5GS is an open source implementation in C of 5G Core and Epc, the core network of the Lte/Nr network. Open5GS suffers from a security vulnerability that can be exploited by an attacker to intercept VNF Virtual Network Functions communications, thereby exposing sensitive information...

Open5GS Access Control Error Vulnerability

Open5GS is an open source implementation in C of 5G Core and Epc, the core network of the Lte/Nr network. An Access Control Error vulnerability exists in Open5GS version 2.4.10 and earlier, which stems from a lack of authentication, and can be exploited by an attacker to send an HTTP request to a...

CVE-2023-4884

An attacker could send an HTTP request to an Open5GS endpoint and retrieve the information stored on the device due to the lack of Authentication...

CVE-2023-4884

An attacker could send an HTTP request to an Open5GS endpoint and retrieve the information stored on the device due to the lack of Authentication...

Authentication flaw

An attacker could send an HTTP request to an Open5GS endpoint and retrieve the information stored on the device due to the lack of Authentication...

CVE-2023-4885 Multiple vulnerabilities in Open5GS

Man in the Middle vulnerability, which could allow an attacker to intercept VNF Virtual Network Function communications resulting in the exposure of sensitive information...

CVE-2023-4885 Multiple vulnerabilities in Open5GS

Man in the Middle vulnerability, which could allow an attacker to intercept VNF Virtual Network Function communications resulting in the exposure of sensitive information...

CVE-2023-4884 Multiple vulnerabilities in Open5GS

An attacker could send an HTTP request to an Open5GS endpoint and retrieve the information stored on the device due to the lack of Authentication...

CVE-2023-4884 Multiple vulnerabilities in Open5GS

An attacker could send an HTTP request to an Open5GS endpoint and retrieve the information stored on the device due to the lack of Authentication...

CVE-2023-4884

CVE-2023-4884 affects the Open5GS implementation (Open5GS 2.4.10 and earlier) where missing authentication allows a remote attacker to send an HTTP request to an Open5GS endpoint and retrieve information stored on the device. The root cause is an access-control/authentication flaw in the Open5GS ...

CVE-2023-4883 Multiple vulnerabilities in Open5GS

Invalid pointer release vulnerability. Exploitation of this vulnerability could allow an attacker to interrupt the correct operation of the service by sending a specially crafted json string to the VNF Virtual Network Function, and triggering the ogssbimessagefree function, which could cause a...

CVE-2023-4883 Multiple vulnerabilities in Open5GS

Invalid pointer release vulnerability. Exploitation of this vulnerability could allow an attacker to interrupt the correct operation of the service by sending a specially crafted json string to the VNF Virtual Network Function, and triggering the ogssbimessagefree function, which could cause a...

CVE-2023-4882 Multiple vulnerabilities in Open5GS

DOS vulnerability that could allow an attacker to register a new VNF Virtual Network Function value. This action could trigger the argsassets function defined in the arg-log.php file, which would then execute the args-abort.c file, causing the service to crash...