What’s Vulnerable › Vulnerabilities

CVE-2021-45462

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 4.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-12-23 · updated 2026-06-17
• Weakness: CWE-1284

Description

In Open5GS 2.4.0, a crafted packet from UE can crash SGW-U/UPF.

Affected products

• Open5GS: 2.4.0

References

• https://github.com/open5gs/open5gs/commit/a0f2535cb5a29bba6dbbccdb90c74ccd770cc700
• https://www.trendmicro.com/en_us/research/23/i/attacks-on-5g-infrastructure-from-users-devices.html
• https://github.com/open5gs/open5gs/commit/a0f2535cb5a29bba6dbbccdb90c74ccd770cc700
• https://www.trendmicro.com/en_us/research/23/i/attacks-on-5g-infrastructure-from-users-devices.html

Get alerted when CVE-2021-45462 or the next vulnerability affects your stack