This vulnerability in Open5GS up to version 2.7.7 involves the function udm_nudm_uecm_handle_amf_registration_update located in /src/udm/nudm-handler.c within the amf-3gpp-access endpoint. An attacker can remotely manipulate this function to cause a denial of service condition. The vulnerability has a CVSS 4.0 base score of 5.3, indicating medium severity. The project was notified early but has not issued a fix or official response. Exploit details have been publicly disclosed, increasing the risk of potential attacks.

Successful exploitation results in denial of service, potentially disrupting the availability of the affected Open5GS component. There is no indication of privilege escalation, data confidentiality, or integrity impact. The vulnerability can be exploited remotely without authentication, increasing the attack surface. No known exploits in the wild have been reported yet.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the project has not responded with a fix, users should monitor official Open5GS channels for updates. In the meantime, consider applying network-level protections to restrict access to the affected service and limit exposure to untrusted networks.