CVE-2022-24109

An issue was discovered in ONOS 2.5.1

Medium · published April 20, 2023

CVSS v3.1
6.5
EPSS
1%
Percentile
57.7
In the wild
Unconfirmed
What it is

An issue was discovered in ONOS 2.5.1. To attack an intent installed by a normal user, a remote attacker can install a duplicate intent with a different key, and then remove the duplicate one. This will remove the flow rules of the intent, even though the intent still exists in the controller.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00848 · 57.7th percentile
Published
2023-04-20T00:00Z
EPSS history
Timeline
  • 20 APR 00:00Z
    An issue was discovered in ONOS 2.5.1
    cvelistv5