Security Advisory

CVE-2025-70123

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-02-13 00:00:00

Last updated 2026-02-13 20:58:52

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

An improper input validation and protocol compliance vulnerability in free5GC v4.0.1 allows remote attackers to cause a denial of service. The UPF incorrectly accepts a malformed PFCP Association Setup Request, violating 3GPP TS 29.244. This places the UPF in an inconsistent state where a subsequent valid PFCP Session Establishment Request triggers a cascading failure, disrupting the SMF connection and causing service degradation.

← Browse all CVEs View on cve.org ↗