This vulnerability in Open5GS (up to version 2.7.7) involves the Shared NF-profile Parser component, specifically in the lib/sbi/nnrf-handler.c file. The issue allows remote attackers to manipulate an unspecified functionality leading to denial of service. The vulnerability requires low attack complexity, no user interaction, and low privileges, with no impact on confidentiality, integrity, or system availability beyond denial of service. Although an exploit is publicly known, no official patch or vendor advisory confirming remediation is currently available.

Successful exploitation results in denial of service, potentially disrupting the availability of Open5GS network functions relying on the affected parser component. There is no indication of impact on confidentiality or integrity. The vulnerability can be triggered remotely with low complexity and no user interaction, increasing the risk of service disruption in affected deployments.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary workaround is documented, users should monitor vendor communications for updates. Until a patch is available, consider limiting exposure of the affected Open5GS components to untrusted networks where feasible.