PT-2026-45454 · Undefined · Undefined

Jiadai Wang + 3 · Publicado 2026-06-01 · Atualizado 2026-06-01 · CVE-2026-37224

Mitre

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

FlexRIC v2.0.0 crashes when receiving a duplicate E2 SETUP REQUEST from the same or spoofed E2 Node. The iApp registry enforces node ID uniqueness via assert() rather than graceful rejection. A remote unauthenticated attacker can crash the iApp process (port 36421) by sending two E2 SETUP REQUESTs with the same E2 node configuration, triggering SIGABRT.

Exploit

Correção

Assertion Failure

Enumeração de Fraquezas

CWE-617

Identificadores relacionados

CVE-2026-37224

Produtos afetados

Undefined

Referências · 3

• 🔥 https://github.com/MinamiKotor1/oran-security-advisories-zhongnan-luo/blob/main/advisories/CVE-2026-37224.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-37224 · Nota de Segurança
• https://gitlab.eurecom.fr/mosaic5g/flexric · Nota