This vulnerability in Open5GS (up to version 2.7.7) impacts the SMF component's OpenAPI_list_create function, enabling remote attackers to trigger a denial of service. The issue arises from improper handling within this function, allowing crafted requests to disrupt service availability. The CVSS 4.0 base score is 5.3 (medium), reflecting network attack vector, low complexity, no user interaction, and limited privileges required. The project has been notified but has not yet provided a remediation or patch. No cloud service is involved, and no known exploits are currently active in the wild.

Successful exploitation results in denial of service, potentially disrupting the availability of the affected Open5GS SMF component. This could impact network functions relying on Open5GS but does not indicate data confidentiality or integrity loss. The attack can be launched remotely without user interaction and requires low privileges.

As of the current information, no official fix or patch is available from the vendor. The project has not responded with remediation guidance. Users should monitor the vendor's advisory channels for updates and consider implementing network-level protections to limit access to the vulnerable OpenAPI endpoint. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.