Multiple vulnerabilities in Open5GS

CVE-2023-4882

What is CVE-2023-4882?

This vulnerability in Open5GS allows an attacker to introduce a new Virtual Network Function (VNF) value, which may lead to a Denial of Service condition. The malicious registration triggers the args_assets() function located in the arg-log.php file, subsequently executing the args-abort.c script. This sequence results in the abrupt termination of the service, impacting availability and potentially leading to further exploitation.

References