FlexRIC v2.0.0 contains a vulnerability triggered by duplicate E2_SETUP_REQUEST messages. The iApp registry component uses assert() to enforce uniqueness of node IDs, which leads to an immediate process crash when duplicates are detected instead of handling the condition gracefully. An attacker can exploit this by sending two E2_SETUP_REQUESTs with the same E2 node configuration, causing the iApp process to abort unexpectedly. This vulnerability allows remote unauthenticated attackers to cause a denial of service on the affected system.

The vulnerability results in a denial of service condition by crashing the iApp process on port 36421. This disrupts the normal operation of FlexRIC and may impact availability. There is no indication of code execution or data compromise. No known exploits are reported in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, consider implementing network-level protections such as filtering or rate limiting to prevent duplicate or spoofed E2_SETUP_REQUEST messages from reaching the iApp process. Monitor for unusual traffic patterns targeting port 36421.