CVSS Meta Temp Score	Garga na exploit ndiyam (≈)	CTI Nganji Score
5.9	$0-$5k	0.23

Gundumabayani

Hakika vulnerability da aka rarraba a matsayin karshewa an gano a Open5GS har 2.7.5. Tabbas, aikin gmm_state_exception ne ke da matsala; idan ba a bayyana ba, to aiki ce da ba a sani ba, a cikin laburare $software_library, a cikin fayil src/amf/gmm-sm.c, a cikin sashi $software_component. Wuro manipulation ga Kari na aiki. Ana kiran wannan rauni da CVE-2025-9405. Ngam yiɗi ka a tuma ndiyam ka nder layi. Kuma, akwai exploit. Ya kamata a yi amfani da patch don magance wannan matsala. Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Furɗebayani

Hakika vulnerability da aka rarraba a matsayin karshewa an gano a Open5GS har 2.7.5. Tabbas, aikin gmm_state_exception ne ke da matsala; idan ba a bayyana ba, to aiki ce da ba a sani ba, a cikin laburare $software_library, a cikin fayil src/amf/gmm-sm.c, a cikin sashi $software_component. Wuro manipulation ga Kari na aiki. Amfani da CWE wajen bayyana matsala yana kaiwa CWE-617. Lalle, rauni an sanar da shi da 3947. Ana samun bayanin tsaro don saukewa a github.com.

Ana kiran wannan rauni da CVE-2025-9405. Ngam yiɗi ka a tuma ndiyam ka nder layi. Bayani na fasaha ga. Wannan vulnerability ɗin ba a san shi sosai ba. Kuma, akwai exploit. Exploit ɗin an bayyana wa jama'a, za a iya amfani da shi. Yimbe ndiyam, exploit might be approx. USD $0-$5k wuro. An bayyana a cikin advisory:

The vulnerability in Open5GS AMF (CVE-2025-9405) arises when the AMF receives a delayed or asynchronous SBI response (e.g., from nudm-uecm) after the UE context has already been removed. This results in an invalid state machine transition and triggers an AMF crash. As the AMF is a critical control-plane component for registration, session, and mobility management, its failure can propagate to other dependent network functions (e.g., SMF), leading to cascading failures and a system-wide disruption rather than an isolated impact. The current CVSS scoring lists Scope as “Unchanged” (S:U), suggesting that the impact is confined to the AMF. In reality, the crash of the AMF directly affects other core functions and destabilizes the entire 5G core signaling path. The Scope should therefore be revised to “Changed” (S:C), as the vulnerability extends beyond the initial component to other interconnected nodes. Regarding Availability Impact, it is currently rated as “Low” (A:L). This classification assumes that partial service remains available and the attack cannot fully deny service. However, this vulnerability completely terminates all existing UE sessions and prevents any new registrations or connections. The denial of service persists after the attack until the AMF is manually restarted or recovered, leaving critical resources entirely inaccessible. This matches the definition of “High” (A:H) availability impact, since the attack causes a total loss of service with lasting consequences, including both the disruption of active connections and the inability to establish new ones.

Á yí huɗɗi-na-gaskiya. Za a iya samun exploit a github.com.

Patch ɗin an san shi da 8e5fed16114f2f5e40bee1b161914b592b2b7b8f. Za a iya sauke maganin matsalar daga github.com. Ya kamata a yi amfani da patch don magance wannan matsala.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Kayanbayani

Sunu

• Open5GS

Furɗe

• 2.7.0
• 2.7.1
• 2.7.2
• 2.7.3
• 2.7.4
• 2.7.5

Laisens

• Borno-wuro

Webseite

• Kayan: https://github.com/open5gs/open5gs/

CPE 2.3bayani

• 🔒
• 🔒
• 🔒

CPE 2.2bayani

• 🔒
• 🔒
• 🔒

CVSSv4bayani

VulDB Furɗo: 🔒
VulDB Gaskiya: 🔍

CNA CVSS-B Score: 🔒
CNA CVSS-BT Score: 🔒
CNA Furɗo: 🔒

CVSSv3bayani

VulDB Meta Base Score: 6.4
VulDB Meta Temp Score: 5.9

VulDB Ganda Borno: 5.3
VulDB Temp Score: 4.8
VulDB Furɗo: 🔒
VulDB Gaskiya: 🔍

Ngamti Ganda Borno: 8.6
Ngamti Furɗo: 🔒

CNA Ganda Borno: 5.3
CNA Furɗo: 🔒

CVSSv2bayani

AV	AC	Au	C	I	A
💳	💳	💳	💳	💳	💳
💳	💳	💳	💳	💳	💳
💳	💳	💳	💳	💳	💳

Vektar	Kumpleksiti	Authentisierung	Kariyandi	Gaskiya	Gashina
furu	furu	furu	furu	furu	furu
furu	furu	furu	furu	furu	furu
furu	furu	furu	furu	furu	furu

VulDB Ganda Borno: 🔒
VulDB Temp Score: 🔒
VulDB Gaskiya: 🔍

Gargajiyabayani

Klasu: Kari na aiki
CWE: CWE-617
CAPEC: 🔒
ATT&CK: 🔒

Fizikal: Ayi
Gumti: Ayi
Gana: Ee

Gashina: 🔒
Gada: Kàndíga
Halitta: Huɗɗi-na-gaskiya
Dawunload: 🔒

EPSS Score: 🔒
EPSS Percentile: 🔒

Furɗo farashi: 🔍
Gaskiya farashi ndiyam: 🔒

0-Day	furu	furu	furu	furu
Lale	furu	furu	furu	furu

Bayani na barazanabayani

Ngam: 🔍
Akteɓe ɓernde: 🔍
Kura APT goruwa masu aiki: 🔍

Kari gamjibayani

Garga: Kari
Halitta: 🔍

0-Day Gana: 🔒

Kari: 8e5fed16114f2f5e40bee1b161914b592b2b7b8f

Waktin layibayani

08/24/2025 Advisory ganna fa.
08/24/2025 +0 Hənde VulDB gite be nayi
08/31/2025 +7 Hənde VulDB gite wuro karshe ta gyara

Ngizimbayani

Kayan: github.com

Gargaaji: 3947
Halitta: Gaskiya
Tafsirga: 🔒

CVE: CVE-2025-9405 (🔒)
GCVE (CVE): GCVE-0-2025-9405
GCVE (VulDB): GCVE-100-321241
EUVD: 🔒
scip Labs: https://www.scip.ch/en/?labs.20161013
Dífférént-dífférént: 🔒

Gumtibayani

Súgá: 08/24/2025 17:13
Gargadi: 08/31/2025 10:46
Goyarwa: 08/24/2025 17:13 (59), 08/25/2025 09:30 (31), 08/25/2025 20:18 (1), 08/31/2025 10:10 (13), 08/31/2025 10:13 (4), 08/31/2025 10:46 (1)
Gadankam: 🔍
Ngwazarma: ZYC010101
Gwamna: ZYC010101
Cache ID: 253:E41:103

Súbítbayani

Shingilam

• Súbít #633467: Open5GS <= v2.7.5 Denial of Service (nga ZYC010101)

Ganaaji

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!