Cmdcs

**Name of the Vulnerable Software and Affected Versions** open5gs versions 2.7.2 and earlier **Description** The issue allows a remote attacker to cause a Denial of Service via a crafted PFCP SessionEstablishmentRequest packet with restoration indication = true and (`teid` = 0 or `teid` >= `ogs pfcp pdr teid pool.size`). **Recommendations** For open5gs versions 2.7.2 and earlier, as a temporary workaround, consider restricting access to the PFCP SessionEstablishmentRequest packet to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.