CVE-2025-5520: Open5GS AMF/MME emm_state_authentication assertion
A vulnerability was found in Open5GS up to 2.7.3. It has been classified as problematic. Affected is the function gmmstateauthentication/emmstateauthentication of the component AMF/MME. The manipulation leads to reachable assertion. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The name of the patch is 9f5d133657850e6167231527514ee1364d37a884. It is recommended to apply a patch to fix this issue. This is a different issue than CVE-2025-1893.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2025-5520?
CVE-2025-5520 has been classified as problematic due to its potential impact on the gmm_state_authentication and emm_state_authentication functions.
How do I fix CVE-2025-5520?
To fix CVE-2025-5520, upgrade Open5GS to version 2.7.4 or higher.
Who is affected by CVE-2025-5520?
CVE-2025-5520 affects all versions of Open5GS up to 2.7.3.
What type of attack can be performed using CVE-2025-5520?
CVE-2025-5520 allows for a remote attack that can lead to reachable assertion in the application.
Which component of Open5GS is impacted by CVE-2025-5520?
CVE-2025-5520 impacts the functions gmm_state_authentication and emm_state_authentication within the AMF/MME component.