FlexRIC v2.0.0 uses a uint16_t counter for assigning xapp_id values, but these IDs are stored in uint32_t message fields. After more than 65,530 E42_SETUP_REQUEST messages, the 16-bit counter wraps around, causing duplicate xapp_ids. When the iApp on port 36422 attempts to register a duplicate xapp_id in its internal data structure, it crashes. This vulnerability can be triggered remotely by an attacker who repeatedly connects and requests new xApp registrations, resulting in a denial of service condition. The CVSS 3.1 base score is 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). There is no vendor advisory or patch information available at this time.

The primary impact is a denial of service caused by the iApp crashing when duplicate xapp_ids are registered due to the 16-bit counter wraparound. There is no impact on confidentiality or integrity. The vulnerability can be exploited remotely without authentication or user interaction, making it a significant availability risk for affected FlexRIC v2.0.0 deployments.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, consider limiting exposure of the iApp service on port 36422 to trusted networks or implementing rate limiting to reduce the likelihood of triggering the counter wraparound. Monitor for unusual repeated xApp registration requests as a potential indicator of exploitation attempts.