This vulnerability in Open5GS (up to version 2.7.7) impacts the SMF component, specifically the smf_nsmf_handle_create_sm_context function. An attacker with low privileges can remotely manipulate this function to trigger a denial of service condition. The vulnerability has a CVSS 4.0 base score of 5.3, indicating medium severity, with network attack vector, low attack complexity, no privileges required for user interaction, and low impact on availability. The issue was reported early to the project but remains unpatched, and public exploit code exists.

Successful exploitation results in denial of service of the affected Open5GS SMF component, potentially disrupting 5G core network functions relying on this software. The impact is limited to availability degradation. No evidence of privilege escalation, data confidentiality, or integrity impact is indicated. Remote exploitation is possible without user interaction, increasing the risk of service disruption.

No official patch or remediation has been released by the vendor or project as of the published date. Users should monitor the Open5GS project for updates and advisories. Until a fix is available, consider applying network-level protections to restrict access to the SMF component and limit exposure to untrusted networks. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.