CVE-2025-14955: Open5GS PFCP handler.c ogs_pfcp_handle_create_pdr initialization
A vulnerability was found in Open5GS up to 2.7.5. Affected by this vulnerability is the function ogspfcphandlecreatepdr in the library lib/pfcp/handler.c of the component PFCP. The manipulation results in improper initialization. It is possible to launch the attack remotely. This attack is characterized by high complexity. The exploitation appears to be difficult. The exploit has been made public and could be used. The patch is identified as 773117aa5472af26fc9f80e608d3386504c3bdb7. It is best practice to apply a patch to resolve this issue.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2025-14955?
The severity of CVE-2025-14955 is considered high due to the potential for remote exploitation.
How do I fix CVE-2025-14955?
To fix CVE-2025-14955, upgrade Open5GS to version 2.7.6 or later.
Which software is affected by CVE-2025-14955?
CVE-2025-14955 affects Open5GS versions up to and including 2.7.5.
What is the nature of the issue in CVE-2025-14955?
CVE-2025-14955 involves improper initialization in the PFCP component that can be exploited remotely.
Can CVE-2025-14955 be exploited remotely?
Yes, CVE-2025-14955 can be exploited remotely due to the vulnerabilities in the PFCP handling.