This vulnerability in omec-project amf (versions 2.0.0 to 2.1.1) involves an unknown function in the NGSetupRequest Handler component that can be manipulated remotely to cause a denial of service. The CVSS 4.0 base score is 5.3 (medium severity), indicating network attack vector, low attack complexity, no privileges required, no user interaction, and limited impact on availability. Although the exploit is publicly available, there are no known exploits in the wild. A patch exists as identified by commit 34bc6724acc97dba1f8691e586da95b042cb612d, but no official vendor advisory or remediation level is provided in the data.

Successful exploitation leads to denial of service, potentially disrupting the availability of the affected component. The attack can be initiated remotely without requiring privileges or user interaction, which increases the risk of exploitation. However, the impact is limited to availability and is rated as medium severity.

A patch identified by commit 34bc6724acc97dba1f8691e586da95b042cb612d is recommended to remediate this vulnerability. Since no official vendor advisory or remediation level is provided, users should apply this patch promptly to mitigate the risk. Patch status is not yet confirmed by a vendor advisory; therefore, check the vendor's official channels for updated remediation guidance.