CVE-2025-60633
📋 TL;DR
A vulnerability in Free5GC versions 4.0.0 and 4.0.1 allows attackers to cause denial of service through the Nudm_SubscriberDataManagement API. This affects 5G core network deployments using these vulnerable versions. The issue can disrupt subscriber data management services.
💻 Affected Systems
- Free5GC
📦 What is this software?
Free5gc by Free5gc
Free5gc by Free5gc
⚠️ Risk & Real-World Impact
Worst Case
Complete unavailability of subscriber data management services, disrupting 5G network operations and affecting user connectivity.
Likely Case
Service degradation or intermittent outages in the Nudm_SubscriberDataManagement component, impacting subscriber data operations.
If Mitigated
Minimal impact with proper network segmentation and rate limiting in place.
🎯 Exploit Status
Exploitation requires network access to the API endpoint but appears straightforward based on issue descriptions.
🛠️ Fix & Mitigation
✅ Official Fix
Patch Version: v4.0.2 or later
Vendor Advisory: https://github.com/free5gc/free5gc/issues/700
Restart Required: Yes
Instructions:
1. Backup current configuration. 2. Update to Free5GC v4.0.2 or later. 3. Restart all Free5GC services. 4. Verify service functionality.
🔧 Temporary Workarounds
Network Segmentation
linuxRestrict access to Nudm_SubscriberDataManagement API endpoints
iptables -A INPUT -p tcp --dport <api_port> -s <trusted_networks> -j ACCEPT
iptables -A INPUT -p tcp --dport <api_port> -j DROP
Rate Limiting
allImplement rate limiting on API endpoints
# Configure using nginx or similar reverse proxy with rate limiting rules
🧯 If You Can't Patch
- Implement strict network access controls to limit API exposure
- Deploy Web Application Firewall (WAF) with DoS protection rules
🔍 How to Verify
Check if Vulnerable:
Check Free5GC version and verify if Nudm_SubscriberDataManagement service is runningCheck Version:
free5gc versionVerify Fix Applied:
Confirm version is v4.0.2 or later and test API functionality📡 Detection & Monitoring
Log Indicators:
- Unusual high volume of requests to Nudm_SubscriberDataManagement API
- Service restart or crash logs
Network Indicators:
- Abnormal traffic patterns to API endpoints
- Increased error responses from API
SIEM Query:
source="free5gc" AND ("Nudm_SubscriberDataManagement" OR "service restart" OR "crash")