A denial of service vulnerability exists in Open5GS (up to version 2.7.7) within the SMF component's OpenAPI_list_create function. The issue can be triggered remotely without user interaction or privileges, leading to service disruption. The vulnerability has a CVSS 4.0 base score of 5.3, indicating medium severity. Although the exploit details are publicly known, the Open5GS project has not yet issued a fix or official response.

Successful exploitation results in denial of service, potentially disrupting the affected Open5GS network function. There is no indication of privilege escalation, data confidentiality, or integrity impact. The vulnerability can be exploited remotely without authentication, increasing the risk of service interruption.

As of the current information, no official patch or remediation is available from the vendor. Users should monitor the Open5GS project for updates and advisories. In the absence of a fix, consider implementing network-level protections to limit access to the vulnerable SMF OpenAPI interface and apply any available workarounds if provided in future advisories.