PT-2026-21582 · Free5Gc · Free5Gc

CVE-2025-69253 · Publicado 2026-02-24 · Atualizado 2026-02-25

Positive Technologies (AI Summary)

CVSS v4.0

6.6

Média

Vetor base

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U

Name of the Vulnerable Software and Affected Versions free5GC versions up to and including 1.4.1

Description free5GC is an open-source project for 5G mobile core networks. Improper error handling with information exposure exists in the User Data Repository component. The NEF component leaks internal parsing error details to remote clients, potentially aiding attackers in service fingerprinting. Deployments using the Nnef PfdManagement service may be vulnerable.

Recommendations Apply the patch available in free5gc/udr pull request 56.

Exploit

Correção

Generation of Error Message Containing Sensitive Information

Enumeração de Fraquezas

CWE-209

Identificadores relacionados

CVE-2025-69253

GHSA-CJ2H-X8QM-XGWC

Produtos afetados

Free5Gc

Referências · 10

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/69xxx/CVE-2025-69253.json · Exploit
• https://github.com/free5gc/free5gc/security/advisories/GHSA-cj2h-x8qm-xgwc · Aviso do Fabricante
• https://github.com/free5gc/free5gc/issues/753 · Aviso do Fabricante
• https://github.com/free5gc/udr/pull/56 · Correção
• https://github.com/free5gc/udr/commit/754d23b03755ad59077ed529ce3b971e477080c4 · Correção
• https://t.me/cveNotify/152947 · Publicação no Telegram
• https://twitter.com/CVEnew/status/2026184665971974517 · Publicação no Twitter
• https://t.me/cveNotify/153187 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2025-69253 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2025-69253 · Nota de Segurança