Vulnerabilities > Open5Gs > Open5Gs > 2.4.10

DATE CVE VULNERABILITY TITLE RISK
2023-10-03 CVE-2023-4882 Improper Resource Shutdown or Release vulnerability in Open5Gs
DOS vulnerability that could allow an attacker to register a new VNF (Virtual Network Function) value.
network
low complexity
open5gs CWE-404
7.5
2023-10-03 CVE-2023-4883 Release of Invalid Pointer or Reference vulnerability in Open5Gs
Invalid pointer release vulnerability.
network
low complexity
open5gs CWE-763
7.5
2023-10-03 CVE-2023-4884 Missing Authentication for Critical Function vulnerability in Open5Gs
An attacker could send an HTTP request to an Open5GS endpoint and retrieve the information stored on the device due to the lack of Authentication.
network
low complexity
open5gs CWE-306
7.5
2023-10-03 CVE-2023-4885 Unspecified vulnerability in Open5Gs
Man in the Middle vulnerability, which could allow an attacker to intercept VNF (Virtual Network Function) communications resulting in the exposure of sensitive information.
network
high complexity
open5gs
5.9