Azure Private 5G Core Denial of Service Vulnerability

A flaw in Azure Private 5G Core allows an attacker to crash or disable the service by sending specially crafted network messages. This vulnerability can interrupt critical 5G network operations.

CWE-130 (Improper Handling of Length Parameter Inconsistency) in Azure Private 5G Core permits a network-based denial of service attack through malformed input handling. An attacker with network access to the affected component can trigger a service crash by exploiting parameter validation inconsistencies, resulting in unavailability of the 5G core infrastructure.