This vulnerability in Open5GS impacts the function udm_nudm_uecm_handle_amf_registration_update within the amf-3gpp-access endpoint, allowing an attacker to cause a denial of service condition remotely. The issue exists in all versions up to 2.7.7. The CVSS 4.0 base score is 5.3, reflecting a medium severity with network attack vector, low attack complexity, no privileges required, and no user interaction needed. The vulnerability was publicly disclosed and the project has not yet responded with a fix or mitigation guidance.

Successful exploitation results in denial of service, potentially disrupting the availability of the Open5GS service component handling AMF registration updates. There is no indication of privilege escalation, data confidentiality, or integrity impact. The vulnerability can be triggered remotely without authentication, increasing the risk of service disruption.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the project has not responded with a fix or mitigation, users should monitor official Open5GS channels for updates. Until a fix is available, consider implementing network-level protections such as filtering or rate limiting traffic to the affected component to reduce exposure.