4.3
CVE-2025-15686
- EPSS 0.51%
- Veröffentlicht 12.08.2026 02:30:08
- Zuletzt bearbeitet 12.08.2026 20:59:21
- CVE-Watchlists
- Unerledigt
Open5GS HSS Service fd_msg_sess_get denial of service
A vulnerability has been found in Open5GS up to 2.7.6. Affected by this issue is the function fd_msg_sess_get of the component HSS Service. Such manipulation of the argument Session-Id leads to denial of service. The attack may be performed from remote. The exploit has been disclosed to the public and may be used. The project locked and limited conversation to collaborators.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
Herstellern/a
≫
Produkt
Open5GS
Version
2.7.0
Status
affected
Version
2.7.1
Status
affected
Version
2.7.2
Status
affected
Version
2.7.3
Status
affected
Version
2.7.4
Status
affected
Version
2.7.5
Status
affected
Version
2.7.6
Status
affected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. 
Login
Login| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.51% | 0.409 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| cna@vuldb.com | 2.1 | 0 | 0 |
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
|
| cna@vuldb.com | 4.3 | 2.8 | 1.4 |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
|
| cna@vuldb.com | 4 | 8 | 2.9 |
AV:N/AC:L/Au:S/C:N/I:N/A:P
|
CWE-404 Improper Resource Shutdown or Release
The product does not release or incorrectly releases a resource before it is made available for re-use.
https://github.com/open5gs/open5gs/
https://vuldb.com/vuln/387279
https://vuldb.com/vuln/387279/cti
https://vuldb.com/cve/CVE-2025-15686
https://vuldb.com/submit/867104
https://github.com/open5gs/open5gs/issues/4190
https://github.com/user-attachments/files/23847497/HSS_ULR_error_poc.pcapng.zip