PT-2026-45556

FlexRIC v2.0.0 allows a single SCTP connection to bind multiple xapp ids by sending multiple E42 SETUP REQUESTs. On disconnect, only the first registered xapp id's resources are cleaned up; subsequent xapp ids and their subscriptions remain as stale entries. A remote attacker can exploit this to...

FlexRIC security vulnerabilities

FlexRIC is an open-source RAN intelligent controller developed by Mosaic5G. The FlexRIC v2.0.0 version contains a security vulnerability. This vulnerability arises from the fact that a single SCTP connection can be bound to multiple xappids, but only the first registered resource is cleaned up wh...