This vulnerability in Open5GS (up to version 2.7.7) involves an unspecified flaw in the Shared NF-profile Parser component located in lib/sbi/nnrf-handler.c. The flaw can be triggered remotely to cause a denial of service condition, impacting the availability of the affected system. The CVSS 4.0 base score is 5.3, indicating medium severity, with network attack vector, low attack complexity, no privileges required, and no user interaction needed. The vulnerability is publicly known and an exploit exists, but no official fix or patch has been documented as of the published date.

Successful exploitation results in denial of service, which can disrupt the availability of Open5GS services relying on the Shared NF-profile Parser. This could affect network functions that depend on this component, potentially causing service interruptions. There is no indication of confidentiality or integrity impact. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or temporary fix is documented, it is advisable to monitor vendor communications for updates. Until a fix is available, consider limiting exposure of the affected Open5GS component to untrusted networks to reduce risk.