Описание
An issue was discovered in ONOS 2.5.1. There is an incorrect comparison of flow rules installed by intents. A remote attacker can install or remove a new intent, and consequently modify or delete the existing flow rules related to other intents.
Ссылки
- Product
- ExploitTechnical DescriptionThird Party Advisory
- Product
- ExploitTechnical DescriptionThird Party Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:opennetworking:onos:2.5.1:*:*:*:*:*:*:*
EPSS
Процентиль: 38%
0.00166
Низкий
6.5 Medium
CVSS3
Дефекты
CWE-697
CWE-697
Связанные уязвимости
CVSS3: 6.5
github
почти 3 года назад
An issue was discovered in ONOS 2.5.1. There is an incorrect comparison of flow rules installed by intents. A remote attacker can install or remove a new intent, and consequently modify or delete the existing flow rules related to other intents.
EPSS
Процентиль: 38%
0.00166
Низкий
6.5 Medium
CVSS3
Дефекты
CWE-697
CWE-697