This vulnerability in Open5GS (up to version 2.7.7) involves an unspecified flaw in the Shared NF-profile Parser within the lib/sbi/nnrf-handler.c file. The flaw can be remotely exploited to cause a denial of service condition. The CVSS 4.0 base score is 5.3, indicating medium severity with network attack vector, low attack complexity, no privileges required, and no user interaction needed. The exploit code is publicly available, but no official patch or vendor remediation level has been provided in the available data.

Successful exploitation results in denial of service, potentially disrupting Open5GS network functions that rely on the affected component. The impact is limited to service availability degradation. There is no indication of privilege escalation, data confidentiality, or integrity compromise from the provided information.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary workaround is documented, it is advisable to monitor vendor communications for updates and apply patches once available. Until then, consider restricting network access to the affected service to trusted sources if feasible.