CVE-2025-41068
BaseFortify
Publication date: 2025-10-27
Last updated on: 2025-10-29
Assigner: Spanish National Cybersecurity Institute, S.A. (INCIBE)
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| open5gs | open5gs | to 2.7.5 (exc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-617 | The product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is a Reachable Assertion flaw in Open5GS up to version 2.7.5. Attackers who can connect to the NRF can cause a denial of service by creating a Network Function (NF) with an invalid type via the SBI interface and then requesting its data. The NRF performs a check that crashes the process, making the discovery service unresponsive.
How can this vulnerability impact me? :
The vulnerability can cause a denial of service by crashing the NRF process, which leaves the discovery service unresponsive. This disrupts the normal operation of the network functions relying on the NRF, potentially causing service outages or degraded network performance.