CVE-2022-29607 - An issue was discovered in ONOS 2.5.1

Back Back to CVE browser

HIGH

An issue was discovered in ONOS 2.5.1

Published Apr 20, 2023

7.5

HIGH

CVSS 3.1

EPSS 0.67%

Description

An issue was discovered in ONOS 2.5.1. Modification of an existing intent to have the same source and destination shows the INSTALLED state without any flow rule. Improper handling of such an intent is misleading to a network operator.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-670

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-33938
Advisory
https://wiki.onosproject.org/display/ONOS/Intent+Framework
Product
https://www.usenix.org/system/files/sec23fall-prepub-285_kim-jiwon.pdf
ExploitTechnical DescriptionThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-33938		Advisory
https://wiki.onosproject.org/display/ONOS/Intent+Framework		Product
https://www.usenix.org/system/files/sec23fall-prepub-285_kim-jiwon.pdf		ExploitTechnical DescriptionThird Party Advisory