---
cve: "CVE-2025-41068"
severity: "HIGH"
cvss: 8.7
epss: "0.4%"
vendor: "NewPlane"
kev: false
exploited: false
published: "2025-10-27 12:47:57"
tags: [cve, security, high]
source: tsecurity.de CVE-Dossier
exported: "2026-10-28T22:32:02+01:00"
---

# CVE-2025-41068

> 8.7 HIGH

## Beschreibung

Reachable Assertion vulnerability in Open5GS up to version 2.7.6 allows attackers with connectivity to the NRF to cause a denial of service. This is achieved by sending the creation of an NF with an invalid type via SBI and then requesting its data. The NRF executes a check that crashes the process, leaving the discovery service unresponsive.

## CNA-Record (Kanon, cvelistV5)

- CNA: **INCIBE**
- State: PUBLISHED
- Stand: 2025-10-29 10:28:05
- CNA-CVSS: **8.7** (`CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L`)

## CISA-Anreicherung (vulnrichment/ADP)

- CISA-SSVC (Coordinator, v2.0.3):
  - Exploitation: **none**
  - Automatable: **no**
  - Technical Impact: **partial**

## CVSS-Vektor

```
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L
```

| Metrik | Wert | Bewertung |
|---|---|---|
| AV Angriffsvektor | Netzwerk | bad |
| AC Komplexität | Gering | bad |
| PR Privilegien | Keine | bad |
| UI Interaktion | Keine | bad |

## Schwachstellen-Klasse

- **CWE-617** — Reachable Assertion
  The product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary.

## Patch verfügbar (OSV)

- 7dfd9a39649700c24c22f1978ed7a35541a72cca

## Referenzen

- <https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-newplanes-open5gs>
- <https://open5gs.org/open5gs/release/2025/07/19/release-v2.7.6.html>

---
_Exportiert aus dem [tsecurity.de CVE-Dossier](https://tsecurity.de/sicherheitsluecken/cve-2025-41068/) · Datenquellen: EUVD (ENISA), NVD, OSV, CISA KEV, FIRST EPSS, Exploit-DB, BSI WID (CSAF)_