{"id":86945,"date":"2026-04-14T06:36:22","date_gmt":"2026-04-14T06:36:22","guid":{"rendered":""},"modified":"-0001-11-30T00:00:00","modified_gmt":"-0001-11-30T00:00:00","slug":"cve-2025-52322-denial-of-service-vulnerability-in-open5gs","status":"publish","type":"post","link":"https:\/\/www.ameeba.com\/blog\/cve-2025-52322-denial-of-service-vulnerability-in-open5gs\/","title":{"rendered":"CVE-2025-52322: Denial of Service Vulnerability in Open5GS<\/strong>"},"content":{"rendered":"

Overview<\/strong><\/p>\n

The vulnerability CVE-2025-52322 is a significant cybersecurity issue found in Open5GS v2.7.2 and earlier versions. Open5GS, a software stack for 5G, is used extensively across various industries, making the impact of this vulnerability widespread. The issue allows a remote attacker to cause a denial-of-service (DoS) attack, leading to potential system compromise or data leakage.<\/p>\n

Vulnerability Summary<\/strong><\/p>\n

CVE ID: CVE-2025-52322
\nSeverity: High (7.5 CVSS Score)
\nAttack Vector: Network
\nPrivileges Required: None
\nUser Interaction: None
\nImpact: Denial of Service, potential system compromise, or data leakage<\/p>\n

Affected Products<\/strong><\/p>\n

Product | Affected Versions<\/p>\n

Open5GS | v2.7.2 and before<\/p>\n

How the Exploit Works<\/strong><\/p>\n

The vulnerability exploits a flaw in the way Open5GS handles the Create Session Request message to the Session Management Function (SMF). An attacker can craft a special Create Session Request message using the IP address of a legitimate User Equipment (UE) in the Packet Data Network Address Allocation (PAA) field. This malicious request causes the software to crash, resulting in a denial of service.<\/p>\n

Conceptual Example Code<\/strong><\/p>\n

The below pseudocode demonstrates how an attacker might exploit the vulnerability:<\/p>\n

# Pseudo code for exploit\ndef exploit(target_ip, legitimate_ue_ip):\n# Craft the malicious Create Session Request message\nmessage = create_session_request()\nmessage.set_paa_field(legitimate_ue_ip)\n# Send the message to the target\nsend_message(target_ip, message)<\/code><\/pre>\n
Note: The actual exploit would likely involve more complex code and a deeper understanding of the Open5GS protocol and message structure. The provided example is a simplified representation meant to illustrate the basic concept of the exploit.<\/p>\n
Mitigation Guidance<\/strong><\/p>\n
To mitigate this vulnerability, users of Open5GS are advised to apply the vendor-provided patch as soon as possible. If the patch cannot be applied immediately, the use of a Web Application Firewall (WAF) or Intrusion Detection System (IDS) can provide temporary mitigation. These measures can help detect and block malicious Create Session Request messages, preventing the DoS attack.<\/p>\n","protected":false},"excerpt":{"rendered":"
Overview The vulnerability CVE-2025-52322 is a significant cybersecurity issue found in Open5GS v2.7.2 and earlier versions. Open5GS, a software stack for 5G, is used extensively across various industries, making the impact of this vulnerability widespread. The issue allows a remote attacker to cause a denial-of-service (DoS) attack, leading to potential system compromise or data leakage. […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"footnotes":""},"categories":[],"tags":[],"vendor":[],"product":[],"attack_vector":[],"asset_type":[],"severity":[],"exploit_status":[],"class_list":["post-86945","post","type-post","status-publish","format-standard","hentry"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t