This vulnerability in Open5GS (up to version 2.7.7) involves a flaw in the SMF component's function smf_nsmf_handle_created_data_in_vsmf that can be manipulated remotely to cause a denial of service condition. The vulnerability has a CVSS 4.0 base score of 5.3, indicating medium severity. The attack vector is network-based with low complexity and no required privileges or user interaction. The vulnerability was responsibly disclosed but remains unpatched as of the published date. Exploit code is publicly available, increasing the risk of exploitation.

Successful exploitation results in denial of service, potentially disrupting the affected Open5GS SMF component's operation. This could impact network service continuity where Open5GS is deployed. There is no indication of data confidentiality or integrity compromise. The vulnerability can be exploited remotely without authentication.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the Open5GS project has not responded or released a fix, monitor official Open5GS channels for updates. In the interim, consider network-level protections such as filtering or limiting access to the SMF component from untrusted networks to reduce exposure.