This vulnerability in Open5GS affects the AMF component's ogs_id_get_value function, allowing remote attackers to cause a denial of service condition. It impacts all versions from 2.7.0 through 2.7.7. The vulnerability has a CVSS 4.0 base score of 5.3 (medium severity) with network attack vector, low attack complexity, no privileges required, no user interaction, and limited impact on availability. The exploit is publicly available, but no official fix or remediation has been published by the vendor as of the report date.

Successful exploitation results in denial of service, potentially disrupting the affected Open5GS AMF component's operation. This could impact network availability where Open5GS is deployed. There is no indication of data confidentiality or integrity impact. The vulnerability can be triggered remotely without user interaction, increasing the risk of exploitation in exposed environments.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded or released a fix, users should monitor official Open5GS channels for updates. Until a patch is available, consider limiting network exposure of the affected component and applying any available network-level protections to reduce attack surface.