CVE-2021-45462

CVE-2021-45462

CVSS 7.5 HIGHEPSS 4.4%

In Open5GS 2.4.0, a crafted packet from UE can crash SGW-U/UPF.

CVSS:3.1/AC:L/AV:N/A:H/C:N/I:N/PR:N/S:U/UI:N

Affected products

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://github.com/open5gs/open5gs/commit/a0f2535cb5a29bba6dbbccdb90c74ccd770cc700 https://www.trendmicro.com/en_us/research/23/i/attacks-on-5g-infrastructure-from-users-devices.html