{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-09-22T23:43:15.962","vulnerabilities":[{"cve":{"id":"CVE-2025-29339","sourceIdentifier":"cve@mitre.org","published":"2025-04-22T17:16:46.827","lastModified":"2026-06-17T09:05:17.583","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"An issue in UPF in Open5GS UPF versions up to v2.7.2 results an assertion failure vulnerability in PFCP session parameter validation. When processing a PFCP Session Establishment Request with PDN Type=0, the UPF fails to handle the invalid value propagated from SMF (or via direct attack), triggering a fatal assertion check and causing a daemon crash."},{"lang":"es","value":"Un problema en UPF en versiones de Open5GS UPF hasta la v2.7.2 genera una vulnerabilidad de fallo de aserción en la validación de parámetros de sesión PFCP. Al procesar una solicitud de establecimiento de sesión PFCP con PDN tipo 0, UPF no gestiona el valor no válido propagado desde SMF (o mediante un ataque directo), lo que activa una comprobación de aserción fatal y provoca un fallo del demonio."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-04-23T13:35:27.528304Z","id":"CVE-2025-29339","options":[{"exploitation":"poc"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-617"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:open5gs:open5gs:*:*:*:*:*:*:*:*","versionEndIncluding":"2.7.2","matchCriteriaId":"E8160C0A-E77F-487D-B5E0-C6657E80D327"}]}]}],"references":[{"url":"https://github.com/open5gs/open5gs/issues/3727","source":"cve@mitre.org","tags":["Exploit","Issue Tracking","Vendor Advisory"]}]}}]}