CVE-2025-65561CWE-20

CVE-2025-65561

High · published December 19, 2025

CVSS v3.1
7.5
EPSS
0%
Percentile
37.1
In the wild
Unconfirmed
What it is

⚡ A crafty crafted header is all it takes to trigger a denial of service in free5GC 4.1.0! This vulnerability has a sneaky side, allowing attackers to disrupt your networks with a mere PFCP Session Modification Request. 😱 Think of it like a restaurant where a diner can tamper with the order slip and cause the kitchen to serve up a series of wrong dishes, leaving everyone hungry and frustrated. In this case, the Local SEID header is the ticket that’s being altered, leading to a chaotic situation. Attackers can exploit this vulnerability to send specific requests that might cause the service to crash or become unresponsive. This could result in downtime for your network, making it harder for users to connect, and potentially leading to a loss of trust in your system. That's absolutely devastating for any organization that relies on smooth communications!

Put simply

Think of it like a restaurant where a diner can tamper with the order slip and cause the kitchen to serve up a series of wrong dishes, leaving everyone hungry and frustrated. In this case, the Local SEID header is the ticket that’s being altered, leading to a chaotic situation. This vulnerability occurs in the LocalNode.Sess function in free5GC 4.1.0, where crafted Local SEID headers in PFCP Session Modification Requests can lead to a denial of service or other unspecified impacts.

What to do

Attackers can exploit this vulnerability to send specific requests that might cause the service to crash or become unresponsive. This could result in downtime for your network, making it harder for users to connect, and potentially leading to a loss of trust in your system. That's absolutely devastating for any organization that relies on smooth communications! To safeguard your systems, upgrade free5GC to a patched version as soon as it becomes available. Regularly audit your configurations to ensure no unexpected headers are processed and consider implementing rate limiting on session modification requests. 🛡️ You've got this! With a quick update and some careful checks, you'll strengthen your defenses in no time! 🔒

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00439 · 37.1th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2025-12-19T00:16Z
Affected products (1)
ProductVersionsFixed in
free5gc/free5gcall versions—
References (3)
EPSS history
Timeline
  • 18 DEC 00:00Z
    An issue was discovered in function LocalNode.Sess in free5GC 4.1.0 allowing attackers to cause a denial of service or other unspecified impacts via crafted…
    cvelistv5