CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2025-66786

OpenAirInterface CN5G AMF<=v2.0.1 There is a logical error when processing JSON format requests. Unauthorized remote attackers can send malicious JSON data to AMF's SBI interface to launch a denial-of-service attack.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 36.0%

CVSS Severity

CVSS v3 Score 7.5

References

https://github.com/swallele/Vulnerability/blob/main/Openairinterface/Dos/Json_Dos.md

Products affected by CVE-2025-66786

Openairinterface » Oai-Cn5g-Amf » Version: 1.0.0

cpe:2.3:a:openairinterface:oai-cn5g-amf:1.0.0
Openairinterface » Oai-Cn5g-Amf » Version: 1.1.0

cpe:2.3:a:openairinterface:oai-cn5g-amf:1.1.0
Openairinterface » Oai-Cn5g-Amf » Version: 1.2.0

cpe:2.3:a:openairinterface:oai-cn5g-amf:1.2.0
Openairinterface » Oai-Cn5g-Amf » Version: 1.2.1

cpe:2.3:a:openairinterface:oai-cn5g-amf:1.2.1
Openairinterface » Oai-Cn5g-Amf » Version: 1.3.0

cpe:2.3:a:openairinterface:oai-cn5g-amf:1.3.0
Openairinterface » Oai-Cn5g-Amf » Version: 1.4.0

cpe:2.3:a:openairinterface:oai-cn5g-amf:1.4.0
Openairinterface » Oai-Cn5g-Amf » Version: 1.5

cpe:2.3:a:openairinterface:oai-cn5g-amf:1.5
Openairinterface » Oai-Cn5g-Amf » Version: 1.5.0

cpe:2.3:a:openairinterface:oai-cn5g-amf:1.5.0
Openairinterface » Oai-Cn5g-Amf » Version: 1.5.1

cpe:2.3:a:openairinterface:oai-cn5g-amf:1.5.1
Openairinterface » Oai-Cn5g-Amf » Version: 2.0.0

cpe:2.3:a:openairinterface:oai-cn5g-amf:2.0.0
Openairinterface » Oai-Cn5g-Amf » Version: 2.0.1

cpe:2.3:a:openairinterface:oai-cn5g-amf:2.0.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2025-66786

Products

Pricing

Contact Us