This vulnerability in Open5GS (up to version 2.7.7) involves the handle_amf_info function within the /lib/sbi/nnrf-handler.c file of the nf-instances Endpoint component. By manipulating the nf_info_pool argument remotely, an attacker can cause resource consumption, potentially impacting system availability. The issue has been publicly disclosed and is reported as fixed, although no direct patch link or detailed remediation information is included in the provided data. The CVSS 4.0 base score is 5.3, indicating medium severity with network attack vector, low complexity, no privileges required, and no user interaction needed.

The vulnerability can lead to resource consumption on affected Open5GS systems, which may degrade performance or availability. Since the attack vector is network-based and requires no privileges or user interaction, it could be exploited remotely. However, there is no indication of exploitation in the wild. The impact is limited to resource exhaustion rather than code execution or data compromise.

The issue is flagged as already fixed. Although no direct patch link or vendor advisory is provided, it is recommended to apply the official patch or update to a version later than 2.7.7 where the vulnerability is resolved. Patch status is not explicitly confirmed in the data, so users should verify with the Open5GS project or vendor advisory for the latest remediation guidance before deployment.