CNNVD-202507-035 Information

Jul 01, 2025 cve

CNNVD ID

CNNVD-202507-035

CVE-2025-6952

CNNVD Published: 2025-07-01

Description (Chinese)

Open5GS是Open5GS开源的一个 5G Core 和 Epc 的 C 语言开源实现，即 Lte/Nr 网络的核心网络。 Open5GS 2.7.5及之前版本存在安全漏洞，该漏洞源于amf_state_operational函数存在可达断言，可能导致服务中断。

Description (English)

Open5GS is a 5G Core and Epc open-language C open source of Open5GS, the core network of the Lte/Nr network. Open5GS 2.7.5 and previous versions contain a security loophole, which stems from the existence of the amf state operational function, which can be asserted and could lead to the interruption of services.

Hazard Level

Critical

Vulnerability Type

其他

Affected Vendor

Open5GS

Published

2025-07-01

Last Modified

2026-02-24

References

https://vuldb.com/?submit.605312 https://github.com/open5gs/open5gs/issues/3938 https://github.com/open5gs/open5gs/issues/3938#issuecomment-3012139813 https://vuldb.com/?ctiid.314489 https://vuldb.com/?id.314489 https://github.com/open5gs/open5gs/commit/53e9e059ed96b940f7ddcd9a2b68cb512524d5db https://access.redhat.com/security/cve/cve-2025-6952

Share on: