CVE-2025-15684
MediumCVSS 5.3Exploitation Probability (EPSS)
Elevated risk50th percentile - higher than 50% of all known CVEs
Summary
A vulnerability was detected in Open5GS up to 2.7.6. The function diam_log_func in lib/diameter/common/init.c of the CER Handler component is affected. Manipulation results in reachable assertion. The attack can be executed remotely. The exploit is public. Upgrading to version 2.7.7 addresses the issue.
Risk Assessment
The public exploit increases the risk of exploitation, potentially leading to denial of service or other adverse effects.
Recommendation
Upgrade Open5GS to version 2.7.7 or later immediately, as it contains the fix.
Original NVD description (English source)
A vulnerability was detected in Open5GS up to 2.7.6. Affected is the function diam_log_func of the file lib/diameter/common/init.c of the component CER Handler. The manipulation results in reachable assertion. The attack can be executed remotely. The exploit is now public and may be used. Upgrading to version 2.7.7 is able to address this issue. The patch is identified as c1a803516a3c0485696cb9bcca7a80ad857c7383. It is advisable to upgrade the affected component.