This vulnerability in Open5GS up to version 2.7.7 involves a flaw in the SMF component's update_authorized_pcc_rule_and_qos function. The flaw allows remote attackers with low privileges to cause a denial of service condition by manipulating this function. The vulnerability has a CVSS 4.0 base score of 5.3, indicating medium severity. Exploit code is publicly available, but no official remediation or patch has been released by the vendor as of the published date.

Successful exploitation results in denial of service of the affected Open5GS SMF component, potentially disrupting service continuity. The vulnerability can be triggered remotely without user interaction and requires low privileges, increasing the risk of impact in exposed environments. There is no indication of privilege escalation, data disclosure, or code execution from the provided data.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or vendor response is available, organizations should monitor Open5GS project communications for updates. Until a patch is released, consider restricting access to the SMF component to trusted entities and applying network-level controls to limit exposure.