This vulnerability exists in Open5GS, an open-source 5G core network implementation, specifically in the NRF component's ogs_sbi_client_add function within the /lib/sbi/client.c file. Improper handling of the client_pool argument allows an attacker to trigger a denial of service remotely. The vulnerability affects all Open5GS versions from 2.7.0 through 2.7.7. Although the issue was reported early to the project, no response or fix has been issued. The CVSS 4.0 base score is 5.3, indicating a medium severity with network attack vector, low attack complexity, no privileges or user interaction required, and limited impact on availability.

Successful exploitation results in denial of service of the NRF component in Open5GS, potentially disrupting 5G core network functions relying on this service. There is no indication of data confidentiality or integrity impact. The vulnerability can be triggered remotely without authentication, increasing the risk of service disruption in affected deployments.

As of the current information, no official patch or remediation is available from the Open5GS project. Users should monitor the vendor or project advisories for updates. Until a fix is released, consider implementing network-level protections such as filtering or rate limiting access to the NRF service to reduce exposure to potential exploitation.