Listen to this Post
How the CVE Works
The vulnerability exists within the Nudm_SubscriberDataManagement service of Free5GC. An unauthenticated attacker can send a specially crafted, malicious HTTP request to the exposed API endpoint. The service fails to properly validate and handle this unexpected input, causing an internal error. This error leads to the termination of the core `free5gc-nudm` process. As a result, the entire User Data Management function becomes unavailable, creating a Denial of Service condition. The service requires manual intervention to be restarted, disrupting network operations for all subscribers reliant on this component.
Platform: Free5GC
Version: 4.0.0, 4.0.1
Vulnerability: API DoS
Severity: Moderate
date: 2025-11-24
Prediction: Patch by 2025-12-15
What Undercode Say:
curl -X POST http://<TARGET_IP>:29502/nudm-sdm/v1/ -H "Content-Type: application/json" -d '{"malformed":"data"}'
ps aux | grep free5gc-nudm systemctl status free5gc-nudm
// Example handler triggering internal server error
func SomeHandler(c gin.Context) {
var input MalformedStruct
if err := c.BindJSON(&input); err != nil {
// Missing proper error handling
log.Panic("Fatal error processing request") // Process crashes
}
}
How Exploit:
Craft malicious HTTP POST request. Send to Nudm_SubscriberDataManagement endpoint. Crash the service process.
Protection from this CVE
Restrict API endpoint access. Implement input validation. Use process supervision.
Impact:
Service unavailability. Manual restart required. Disrupts subscriber management.
🎯Let’s Practice Exploiting & Learn Patching For Free:
Sources:
Reported By: github.com
Extra Source Hub:
Undercode
