CVE-2025-6952
Open5GS AMF Service amf-sm.c amf_state_operational assertion
- State
- Published
- Severity
- 4.8 Medium
- Published
- Jul 1, 2025
- Updated
- Jul 1, 2025
- Reserved
- Jul 1, 2025
Description
A vulnerability, which was classified as problematic, has been found in Open5GS up to 2.7.5. This issue affects the function amf_state_operational of the file src/amf/amf-sm.c of the component AMF Service. The manipulation leads to reachable assertion. It is possible to launch the attack on the local host. The identifier of the patch is 53e9e059ed96b940f7ddcd9a2b68cb512524d5db. It is recommended to apply a patch to fix this issue.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 4.8 Medium | CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X | VulDB |
| 3.1 | 3.3 Low | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:X/RL:O/RC:C | VulDB |
| 3.0 | 3.3 Low | CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:X/RL:O/RC:C | VulDB |
| 2.0 | 1.7 Low | AV:L/AC:L/Au:S/C:N/I:N/A:P/E:ND/RL:OF/RC:C | VulDB |
Weaknesses
- CWE-617 Reachable Assertion
Affected Products
| Product | Versions |
|---|---|
Open5GSn/a |
|
References
- VDB-314489 | Open5GS AMF Service amf-sm.c amf_state_operational assertionvdb-entrytechnical-description
- VDB-314489 | CTI Indicators (IOB, IOC, IOA)signaturepermissions-required
- Submit #605312 | Open5GS <=2.7.5 Reachable Assertionthird-party-advisory
- https://github.com/open5gs/open5gs/issues/3938issue-tracking
- https://github.com/open5gs/open5gs/issues/3938#issuecomment-3012139813issue-tracking
- https://github.com/open5gs/open5gs/commit/53e9e059ed96b940f7ddcd9a2b68cb512524d5dbpatch
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.