Design/Logic Flaw

An issue was discovered in open5gs v2.6.6. InitialUEMessage, Registration request sent at a specific time can crash AMF due to incorrect error handling of NudmUECMRegistration response...

Design/Logic Flaw

An issue was discovered in open5gs v2.6.6. SIGPIPE can be used to crash AMF...

Open5GS 安全漏洞

Open5GS is an open source implementation in C of 5G Core and Epc, the core network of the Lte/Nr network. Open5GS suffers from a denial of service vulnerability that can be exploited by an attacker to cause AMF to crash...

CVE-2023-50020

Open5GS v2.6.6 is affected by CVE-2023-50020. A SIGPIPE condition can crash the AMF, per multiple sources (NVD/Red Hat/CNNVD). Reported impact is availability disruption (CVE base score 7.5, HIGH). No exploitation details are provided in the core documents. A practical workaround documented by PT...

CVE-2023-50019

An issue was discovered in open5gs v2.6.6. InitialUEMessage, Registration request sent at a specific time can crash AMF due to incorrect error handling of NudmUECMRegistration response...

CVE-2023-50020

An issue was discovered in open5gs v2.6.6. SIGPIPE can be used to crash AMF...

PT-2024-13848 · Open5Gs · Open5Gs

Name of the Vulnerable Software and Affected Versions: open5gs version 2.6.6 Description: An issue was discovered in open5gs where SIGPIPE can be used to crash AMF. Recommendations: For open5gs version 2.6.6, as a temporary workaround, consider disabling the use of SIGPIPE until a patch is...

CVE-2023-50019

An issue was discovered in open5gs v2.6.6. InitialUEMessage, Registration request sent at a specific time can crash AMF due to incorrect error handling of NudmUECMRegistration response...

CVE-2023-50019

The CVE-2023-50019 entry concerns Open5GS v2.6.6, where an issue in InitialUEMessage leads to an AMF crash due to incorrect error handling of Nudm_UECM_Registration responses. The vulnerability is categorized as a Denial of Service risk with a CVSS v3.1 base score of 5.9 (NETWORK attack vector, H...

CVE-2023-50020

An issue was discovered in open5gs v2.6.6. SIGPIPE can be used to crash AMF...

Open5GS Security Vulnerabilities

Open5GS is an open source C implementation of 5G Core and Epc, the core network of the Lte/Nr network. A security vulnerability exists in open5gs version v2.6.6, which stems from the fact that SIGPIPE can crash AMF...

CVE-2023-50020

An issue was discovered in open5gs v2.6.6. SIGPIPE can be used to crash AMF...

Open5GS Denial of Service Vulnerability (CNVD-2023-96086)

Open5GS is an open source implementation in C of 5G Core and Epc, the core network of the Lte/Nr network. A denial of service vulnerability exists in Open5GS version 2.4.10 and earlier due to an invalid pointer release flaw in the ogssbimessagefree function, which can be exploited by an attacker ...

Open5GS has an unspecified vulnerability (CNVD-2025-18587)

Open5GS is an open source implementation in C of 5G Core and Epc, the core network of the Lte/Nr network. Open5GS suffers from a security vulnerability that can be exploited by an attacker to intercept VNF Virtual Network Functions communications, thereby exposing sensitive information...

Open5GS Access Control Error Vulnerability

Open5GS is an open source implementation in C of 5G Core and Epc, the core network of the Lte/Nr network. An Access Control Error vulnerability exists in Open5GS version 2.4.10 and earlier, which stems from a lack of authentication, and can be exploited by an attacker to send an HTTP request to a...

CVE-2023-4884

An attacker could send an HTTP request to an Open5GS endpoint and retrieve the information stored on the device due to the lack of Authentication...

CVE-2023-4884

An attacker could send an HTTP request to an Open5GS endpoint and retrieve the information stored on the device due to the lack of Authentication...

Authentication flaw

An attacker could send an HTTP request to an Open5GS endpoint and retrieve the information stored on the device due to the lack of Authentication...

CVE-2023-4885 Multiple vulnerabilities in Open5GS

Man in the Middle vulnerability, which could allow an attacker to intercept VNF Virtual Network Function communications resulting in the exposure of sensitive information...

CVE-2023-4885 Multiple vulnerabilities in Open5GS

Man in the Middle vulnerability, which could allow an attacker to intercept VNF Virtual Network Function communications resulting in the exposure of sensitive information...