CVE-2023-41591

An issue in Open Network Foundation ONOS v2.7.0 allows attackers to create fake IP/MAC addresses and potentially execute a man-in-the-middle attack on…

Critical · published May 29, 2025

CVSS v3.1
9.8
EPSS
0%
Percentile
32.6
In the wild
Unconfirmed
What it is

🚨 An attacker can create fake IP/MAC addresses with a single malicious command! This vulnerability in Open Network Foundation ONOS v2.7.0 is absolutely devastating for network security! 🔥 Think of a man-in-the-middle attack like a crafty con artist who sneaks into a crowded café and pretends to be the barista, misdirecting orders and even listening in on conversations—if the attacker can impersonate legitimate devices, who knows what secrets they could hear? With the ability to forge IP and MAC addresses, an attacker could intercept sensitive communications between legitimate hosts, leading to data breaches, unauthorized access, or even complete control over network traffic. The consequences could be catastrophic, as critical information is exposed and trust in network systems is shattered!

Put simply

Think of a man-in-the-middle attack like a crafty con artist who sneaks into a crowded café and pretends to be the barista, misdirecting orders and even listening in on conversations—if the attacker can impersonate legitimate devices, who knows what secrets they could hear? This vulnerability allows malicious actors to spoof legitimate IP and MAC addresses, enabling them to potentially launch man-in-the-middle attacks on communications between real and fake hosts.

What to do

With the ability to forge IP and MAC addresses, an attacker could intercept sensitive communications between legitimate hosts, leading to data breaches, unauthorized access, or even complete control over network traffic. The consequences could be catastrophic, as critical information is exposed and trust in network systems is shattered! To protect your network, upgrade to ONOS version 2.7.1 immediately to patch this vulnerability. Additionally, implement network monitoring solutions to detect any suspicious activity and ensure strict access controls to your network devices. You've got this! By taking these steps, you can lock down your network and protect it from these sneaky attacks. 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00396 · 32.6th percentile
Published
2025-05-29T00:00Z
EPSS history
Timeline
  • 29 MAY 00:00Z
    An issue in Open Network Foundation ONOS v2.7.0 allows attackers to create fake IP/MAC addresses and potentially execute a man-in-the-middle attack on…
    cvelistv5