This vulnerability in Open5GS (up to version 2.7.7) involves the Shared NF-profile Parser within the library lib/sbi/nnrf-handler.c. An attacker can remotely manipulate this component to trigger a denial of service condition. The vulnerability has a CVSS 4.0 base score of 5.3, indicating medium severity, with network attack vector, low attack complexity, no privileges required, and no user interaction needed. Exploit code is publicly available, but no vendor advisory or patch information is currently provided.

Successful exploitation results in denial of service, potentially disrupting Open5GS network functions that rely on the affected Shared NF-profile Parser component. This could impact availability of services dependent on Open5GS. There is no indication of privilege escalation, data confidentiality, or integrity impact from the provided data.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or remediation level is provided, users should monitor vendor communications for updates. Until a fix is available, consider limiting exposure of the affected Open5GS components to untrusted networks to reduce risk.