Priority HIGH 78
An issue in onos v2.7.0 allows attackers to trigger unexpected behavior within a device connected to a legacy switch via changing the link type from indirect to direct.
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.00492 · Published 2025-03-24 · No fix listed CWE-670
Priority HIGH 72
A denial-of-service vulnerability exists in the omec-project UPF (pfcpiface component) in version upf-epc-pfcpiface:2.1.3-dev.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00416 · Published 2025-12-18 · No fix listed CWE-125
Priority HIGH 72
A denial-of-service vulnerability exists in the omec-project UPF (pfcpiface component) in version upf-epc-pfcpiface:2.1.3-dev.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00412 · Published 2025-12-18 · No fix listed CWE-125
Priority HIGH 72
A denial-of-service vulnerability exists in the omec-project UPF (pfcpiface component) in version upf-epc-pfcpiface:2.1.3-dev.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00412 · Published 2025-12-18 · No fix listed CWE-476
Priority HIGH 72
A denial-of-service vulnerability exists in the omec-upf (upf-epc-pfcpiface) in version upf-epc-pfcpiface:2.1.3-dev.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00427 · Published 2025-12-18 · No fix listed CWE-476
Priority HIGH 72
A denial-of-service vulnerability exists in the omec-project UPF (component upf-epc/pfcpiface) up to at least version upf-epc-pfcpiface:2.1.3-dev.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00439 · Published 2025-12-18 · No fix listed CWE-476
Priority HIGH 72
An issue in Open Networking Foundations sdran-in-a-box v.1.4.3 and onos-a1t v.0.2.3 allows a remote attacker to cause a denial of service via the onos-a1t component of the sdran-in-a-box, specifically the DeleteWatcher f…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00603 · Published 2024-11-04 · No fix listed CWE-770
Priority MEDIUM 51
An issue was discovered in ONOS 2.5.1.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00987 · Published 2023-04-20 · No fix listed CWE-20
Priority MEDIUM 51
An issue was discovered in ONOS 2.5.1.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01007 · Published 2023-04-20 · No fix listed CWE-178
Priority MEDIUM 50
An issue in onos v2.7.0 allows attackers to trigger a packet deserialization problem when supplying a crafted LLDP packet.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00567 · Published 2025-03-24 · No fix listed CWE-502
Priority MEDIUM 49
An issue in Open Network Foundation ONOS v2.7.0 allows attackers to create fake IP/MAC addresses and potentially execute a man-in-the-middle attack on communications between fake and real hosts.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00413 · Published 2025-05-29 · No fix listed CWE-290
Priority MEDIUM 44
OpenFlow version 1.0 onwards contains a Denial of Service and Improper authorization vulnerability in OpenFlow handshake: The DPID (DataPath IDentifier) in the features_reply message are inherently trusted by the control…
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01167 · Published 2018-05-24 · Will not fix CWE-863
Priority MEDIUM 40
Unchecked Return Value to NULL Pointer Dereference vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module).
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00546 · Published 2024-09-18 · No fix listed CWE-690
Priority MEDIUM 40
Unchecked Return Value to NULL Pointer Dereference vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module).
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00546 · Published 2024-09-18 · No fix listed CWE-690
Priority MEDIUM 40
Unchecked Return Value to NULL Pointer Dereference vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module).
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00546 · Published 2024-09-18 · No fix listed CWE-690
Priority MEDIUM 40
Unchecked Return Value to NULL Pointer Dereference vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module).
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00546 · Published 2024-09-18 · No fix listed CWE-690
Priority MEDIUM 40
Unchecked Return Value to NULL Pointer Dereference vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module).
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00546 · Published 2024-09-18 · No fix listed CWE-690
Priority MEDIUM 40
Unchecked Return Value to NULL Pointer Dereference vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module).
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00546 · Published 2024-09-18 · No fix listed CWE-690
Priority MEDIUM 40
An issue was discovered in ONOS 2.5.1.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00874 · Published 2023-04-20 · No fix listed
Priority MEDIUM 40
An issue was discovered in ONOS 2.5.1.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00668 · Published 2023-04-20 · No fix listed CWE-670
Priority MEDIUM 40
An issue was discovered in ONOS 2.5.1.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00654 · Published 2023-04-20 · No fix listed CWE-670
Priority MEDIUM 40
An issue was discovered in ONOS 2.5.1.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00856 · Published 2023-04-20 · No fix listed CWE-400
Priority MEDIUM 40
An issue was discovered in ONOS 2.5.1.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00654 · Published 2023-04-20 · No fix listed CWE-755
Priority LOW 39
Limited secret space in LLDP packets used in onos v2.7.0 allows attackers to obtain the private key via a bruteforce attack.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00374 · Published 2025-03-24 · No fix listed CWE-331
Priority LOW 39
Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module).
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00328 · Published 2024-09-18 · No fix listed CWE-125
Load more
THREATIST.IORead the docs