CVE-2025-15684: Open5GS CER init.c diam_log_func assertion
A vulnerability was detected in Open5GS up to 2.7.6. Affected is the function diamlogfunc of the file lib/diameter/common/init.c of the component CER Handler. The manipulation results in reachable assertion. The attack can be executed remotely. The exploit is now public and may be used. Upgrading to version 2.7.7 is able to address this issue. The patch is identified as c1a803516a3c0485696cb9bcca7a80ad857c7383. It is advisable to upgrade the affected component.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Open5GS CER Handler (lib/diameter/common/init.c - diam_log_func)to a version that resolves this vulnerability.Fixed in 2.7.7Patch c1a803516a3c0485696cb9bcca7a80ad857c7383
Event History
Frequently Asked Questions
What is the severity of CVE-2025-15684?
The severity of CVE-2025-15684 is classified as medium with a score of 5.3.
What type of vulnerability is associated with CVE-2025-15684?
CVE-2025-15684 is a remote exploitation vulnerability that affects the CER Handler in Open5GS.
How do I fix CVE-2025-15684?
To fix CVE-2025-15684, upgrade to a version of Open5GS that is higher than 2.7.6.
What component is affected by CVE-2025-15684?
CVE-2025-15684 affects the diam_log_func function in the CER Handler component of Open5GS.
Can CVE-2025-15684 be exploited remotely?
Yes, CVE-2025-15684 can be remotely exploited, allowing for potential unauthorized access.