CVE-2023-4882CWE-404
Multiple vulnerabilities in Open5GS
High · published October 3, 2023
What it is
DOS vulnerability that could allow an attacker to register a new VNF (Virtual Network Function) value. This action could trigger the args_assets() function defined in the arg-log.php file, which would then execute the args-abort.c file, causing the service to crash.
The record
Technical detail
- CVSS v3.1
- 7.5 · HIGH
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS v4.0
- Not supplied
- EPSS
- 0.00616 · 48.9th percentile
- Weakness
- CWE-404 · Improper Resource Shutdown or Release
- Published
- 2023-10-03T14:39Z
EPSS history
Timeline