CVE-2022-29604 - An issue was discovered in ONOS 2.5.1

Back Back to CVE browser

CRITICAL

An issue was discovered in ONOS 2.5.1

Published Apr 20, 2023

9.8

CRITICAL

CVSS 3.1

EPSS 1.02%

Description

An issue was discovered in ONOS 2.5.1. An intent with an uppercase letter in a device ID shows the CORRUPT state, which is misleading to a network operator. Improper handling of case sensitivity causes inconsistency between intent and flow rules in the network.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-178

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-33935
Advisory
https://wiki.onosproject.org/display/ONOS/Intent+Framework
Product
https://www.usenix.org/system/files/sec23fall-prepub-285_kim-jiwon.pdf
ExploitTechnical DescriptionThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-33935		Advisory
https://wiki.onosproject.org/display/ONOS/Intent+Framework		Product
https://www.usenix.org/system/files/sec23fall-prepub-285_kim-jiwon.pdf		ExploitTechnical DescriptionThird Party Advisory