ByteOS Network

NVD Vulnerability Details :

CVE-2025-8804

Modified

Source-cna@vuldb.com

Published At-10 Aug, 2025 | 10:15

Updated At-15 Aug, 2025 | 14:15

A vulnerability was found in Open5GS up to 2.7.5. Affected by this vulnerability is the function ngap_build_downlink_nas_transport of the component AMF. The manipulation leads to reachable assertion. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 2.7.6 is able to address this issue. The identifier of the patch is bca0a7b6e01d254f4223b83831162566d4626428. It is recommended to upgrade the affected component.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Secondary	4.0	5.5	MEDIUM	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Secondary	3.1	5.3	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Primary	3.1	7.5	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Secondary	2.0	5.0	MEDIUM	AV:N/AC:L/Au:N/C:N/I:N/A:P

CPE Matches

open5gs>>open5gs>>Versions before 2.7.6(exclusive)

cpe:2.3:a:open5gs:open5gs:*:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-617	Secondary	cna@vuldb.com

References

Hyperlink	Source	Resource
https://github.com/ZHENGHAOHELLO/BugReport/blob/main/CVE-2025-8804	cna@vuldb.com	N/A
https://github.com/open5gs/open5gs/commit/bca0a7b6e01d254f4223b83831162566d4626428	cna@vuldb.com	Patch
https://github.com/open5gs/open5gs/issues/3950	cna@vuldb.com	Issue Tracking
https://github.com/open5gs/open5gs/issues/3950#issuecomment-3034693457	cna@vuldb.com	Issue Tracking
https://github.com/open5gs/open5gs/releases/tag/v2.7.6	cna@vuldb.com	Release Notes
https://github.com/user-attachments/files/21030801/newdata_for_ngap.zip	cna@vuldb.com	Exploit
https://vuldb.com/?ctiid.319333	cna@vuldb.com	Permissions Required VDB Entry
https://vuldb.com/?id.319333	cna@vuldb.com	Third Party Advisory VDB Entry
https://vuldb.com/?submit.625698	cna@vuldb.com	N/A
https://vuldb.com/?submit.626124	cna@vuldb.com	Third Party Advisory VDB Entry
https://github.com/open5gs/open5gs/issues/3950	134c704f-9b21-4f2e-91b3-4a467353bcc0	Issue Tracking

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History