CVE-2025-15687: Open5GS SMF Diameter Gx Credit-Control-Answer smf_gx_cca_cb denial of service
A security flaw has been discovered in Open5GS up to 2.7.6. Impacted is the function smfgxccacb of the component SMF Diameter Gx Credit-Control-Answer Handler. The manipulation results in denial of service. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks. Upgrading to version 2.7.7 is recommended to address this issue. The patch is identified as f23d7a5e959acd8f37b925dc29b85f26b7d391cb. Upgrading the affected component is advised.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Open5GS SMF Diameter Gx Credit-Control-Answer Handler (smf_gx_cca_cb)to a version that resolves this vulnerability.Fixed in 2.7.7Patch f23d7a5e959acd8f37b925dc29b85f26b7d391cb
Event History
Frequently Asked Questions
What is the severity of CVE-2025-15687?
The severity of CVE-2025-15687 is medium with a score of 4.3.
What type of attack does CVE-2025-15687 expose systems to?
CVE-2025-15687 exposes systems to a remote denial of service attack.
What component of Open5GS is affected by CVE-2025-15687?
CVE-2025-15687 affects the SMF Diameter Gx Credit-Control-Answer Handler in Open5GS.
How do I fix CVE-2025-15687?
To fix CVE-2025-15687, upgrade Open5GS to a version beyond 2.7.6 where the vulnerability is patched.
Can CVE-2025-15687 be exploited remotely?
Yes, CVE-2025-15687 can be exploited remotely.