CVE-2025-69208

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-69208

5.3 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

f

ree5GC UDR is the user data repository (UDR) for free5GC, an an open-source project for 5th generation (5G) mobile core networks. Versions prior to 1.4.1 contain an Improper Error Handling vulnerability with Information Exposure. All deployments of free5GC using the Nnef_PfdManagement service may be affected. The NEF component reliably leaks internal parsing errors (e.g., invalid character 'n' after top-level value) to remote clients. This can aid attackers in fingerprinting server software and logic flows. Version 1.4.1 fixes the issue. There is no direct workaround at the application level. The recommended mitigation is to apply the provided patch.

References
Link Resource
https://github.com/free5gc/free5gc/issues/753 Exploit Issue Tracking Patch Vendor Advisory
https://github.com/free5gc/free5gc/security/advisories/GHSA-f3pc-w7jp-4jh2 Patch Vendor Advisory
https://github.com/free5gc/udr/commit/91bb34bd96e1c89b3fddca80db8b90049da61ebb Patch
https://github.com/free5gc/udr/pull/56 Issue Tracking Patch
Configurations

Configuration 1 (hide)

cpe:2.3:a:free5gc:udr:*:*:*:*:*:go:*:*
History

25 Feb 2026, 15:49

Type Values Removed Values Added
First Time Free5gc
Free5gc udr
References () https://github.com/free5gc/free5gc/issues/753 - () https://github.com/free5gc/free5gc/issues/753 - Exploit, Issue Tracking, Patch, Vendor Advisory
References () https://github.com/free5gc/free5gc/security/advisories/GHSA-f3pc-w7jp-4jh2 - () https://github.com/free5gc/free5gc/security/advisories/GHSA-f3pc-w7jp-4jh2 - Patch, Vendor Advisory
References () https://github.com/free5gc/udr/commit/91bb34bd96e1c89b3fddca80db8b90049da61ebb - () https://github.com/free5gc/udr/commit/91bb34bd96e1c89b3fddca80db8b90049da61ebb - Patch
References () https://github.com/free5gc/udr/pull/56 - () https://github.com/free5gc/udr/pull/56 - Issue Tracking, Patch
CPE cpe:2.3:a:free5gc:udr:*:*:*:*:*:go:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.3
Summary
  • (es) free5GC UDR es el repositorio de datos de usuario (UDR) para free5GC, un proyecto de código abierto para redes móviles de núcleo de quinta generación (5G). Las versiones anteriores a la 1.4.1 contienen una vulnerabilidad de Manejo Inadecuado de Errores con Exposición de Información. Todas las implementaciones de free5GC que utilizan el servicio Nnef_PfdManagement pueden verse afectadas. El componente NEF filtra de forma fiable errores de análisis internos (p. ej., carácter no válido 'n' después del valor de nivel superior) a clientes remotos. Esto puede ayudar a los atacantes a identificar el software del servidor y los flujos lógicos. La versión 1.4.1 corrige el problema. No existe una solución alternativa directa a nivel de aplicación. La mitigación recomendada es aplicar el parche proporcionado.

23 Feb 2026, 22:16

Type Values Removed Values Added
New CVE
Information

Published : 2026-02-23 22:16

Updated : 2026-02-25 15:49

NVD link : CVE-2025-69208

Mitre link : CVE-2025-69208

CVE.ORG link : CVE-2025-69208

JSON object : View

Products Affected

free5gc

CWE
CWE-209

Generation of Error Message Containing Sensitive Information