This vulnerability in Open5GS 2.7.6 impacts the CCA Message Handler functions smf_gx_cca_cb, smf_gy_cca_cb, and smf_s6b. An attacker can remotely manipulate these functions to trigger a denial of service condition. The CVSS 4.0 base score is 6.3 (medium), reflecting network attack vector, high attack complexity, no privileges or user interaction needed, and low impact on availability. The exploit is publicly known but difficult to execute. No patch or vendor advisory is currently available to confirm remediation status.

Successful exploitation results in denial of service, potentially disrupting Open5GS network functions relying on the affected CCA Message Handler components. The impact is limited to availability degradation. There is no indication of confidentiality or integrity compromise. The attack complexity is high, reducing the likelihood of widespread exploitation despite the public exploit availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, consider restricting network access to the affected Open5GS services to trusted sources only and monitor for unusual service disruptions. Avoid deploying version 2.7.6 in exposed environments if possible.