PT-2026-21562 · Free5Gc · Free5Gc Udr

Publicado 2026-02-23 · Atualizado 2026-02-25 · CVE-2025-69208

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions free5GC UDR versions prior to 1.4.1

Description The free5GC UDR, a user data repository for the free5GC 5G mobile core network project, contains an Improper Error Handling issue that can lead to Information Exposure. Deployments utilizing the Nnef PfdManagement service may be affected. The NEF component reveals internal parsing errors to remote clients, potentially aiding attackers in fingerprinting the server software and understanding its logic flows. The vulnerability is due to the component reliably leaking internal parsing errors, such as invalid characters, to remote clients.

Recommendations Update to version 1.4.1 or later.

Exploit

Correção

Generation of Error Message Containing Sensitive Information

Enumeração de Fraquezas

CWE-209

Identificadores relacionados

CVE-2025-69208

GHSA-F3PC-W7JP-4JH2

Produtos afetados

Free5Gc Udr

Referências · 12

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/69xxx/CVE-2025-69208.json · Exploit
• https://github.com/free5gc/free5gc/issues/753 · Aviso do Fabricante
• https://github.com/free5gc/free5gc/security/advisories/GHSA-f3pc-w7jp-4jh2 · Aviso do Fabricante
• https://github.com/free5gc/udr/pull/56 · Correção
• https://github.com/free5gc/udr/commit/91bb34bd96e1c89b3fddca80db8b90049da61ebb · Correção
• https://twitter.com/VulmonFeeds/status/2026123131107070176 · Publicação no Twitter
• https://twitter.com/CVEnew/status/2026184684422775273 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2025-69208 · Aviso do Fabricante
• https://t.me/CVEtracker/45523 · Publicação no Telegram
• https://twitter.com/transilienceai/status/2026137706363809973 · Publicação no Twitter
• https://t.me/cveNotify/153167 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2025-69208 · Nota de Segurança