Priority HIGH 72
A denial-of-service vulnerability exists in the omec-project UPF (pfcpiface component) in version upf-epc-pfcpiface:2.1.3-dev.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00416 · Published 2025-12-18 · No fix listed CWE-125
Priority HIGH 72
A denial-of-service vulnerability exists in the omec-project UPF (pfcpiface component) in version upf-epc-pfcpiface:2.1.3-dev.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00412 · Published 2025-12-18 · No fix listed CWE-125
Priority HIGH 72
A denial-of-service vulnerability exists in the omec-project UPF (pfcpiface component) in version upf-epc-pfcpiface:2.1.3-dev.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00412 · Published 2025-12-18 · No fix listed CWE-476
Priority HIGH 72
A denial-of-service vulnerability exists in the omec-upf (upf-epc-pfcpiface) in version upf-epc-pfcpiface:2.1.3-dev.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00427 · Published 2025-12-18 · No fix listed CWE-476
Priority HIGH 72
A denial-of-service vulnerability exists in the omec-project UPF (component upf-epc/pfcpiface) up to at least version upf-epc-pfcpiface:2.1.3-dev.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00439 · Published 2025-12-18 · No fix listed CWE-476
Priority LOW 25
An issue in Open Network Foundation ONOS v2.7.0 allows attackers to cause a Denial of Service (DoS) via supplying crafted packets.
CVSS 3.1MEDIUM 5.6· Network · No auth · No interaction · EPSS 0.00287 · Published 2025-05-29 · No fix listed CWE-400
Priority MEDIUM 49
An issue in Open Network Foundation ONOS v2.7.0 allows attackers to create fake IP/MAC addresses and potentially execute a man-in-the-middle attack on communications between fake and real hosts.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00413 · Published 2025-05-29 · No fix listed CWE-290
Priority HIGH 78
An issue in onos v2.7.0 allows attackers to trigger unexpected behavior within a device connected to a legacy switch via changing the link type from indirect to direct.
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.00492 · Published 2025-03-24 · No fix listed CWE-670
Priority LOW 39
Limited secret space in LLDP packets used in onos v2.7.0 allows attackers to obtain the private key via a bruteforce attack.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00374 · Published 2025-03-24 · No fix listed CWE-331
Priority MEDIUM 50
An issue in onos v2.7.0 allows attackers to trigger a packet deserialization problem when supplying a crafted LLDP packet.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00567 · Published 2025-03-24 · No fix listed CWE-502
Priority HIGH 72
An issue in Open Networking Foundations sdran-in-a-box v.1.4.3 and onos-a1t v.0.2.3 allows a remote attacker to cause a denial of service via the onos-a1t component of the sdran-in-a-box, specifically the DeleteWatcher f…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00603 · Published 2024-11-04 · No fix listed CWE-770
Priority LOW 39
Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module).
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00328 · Published 2024-09-18 · No fix listed CWE-125
Priority LOW 39
Improper Null Termination vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module).
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00328 · Published 2024-09-18 · No fix listed CWE-170
Priority LOW 39
Unchecked Return Value to NULL Pointer Dereference vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module).
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00417 · Published 2024-09-18 · No fix listed CWE-690
Priority LOW 39
Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module).
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00371 · Published 2024-09-18 · No fix listed CWE-125
Priority LOW 39
Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module).
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00371 · Published 2024-09-18 · No fix listed CWE-125
Priority LOW 39
Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module).
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00371 · Published 2024-09-18 · No fix listed CWE-125
Priority LOW 39
Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module).
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00371 · Published 2024-09-18 · No fix listed CWE-125
Priority LOW 39
Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module).
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00371 · Published 2024-09-18 · No fix listed CWE-125
Priority LOW 39
Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module).
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00371 · Published 2024-09-18 · No fix listed CWE-125
Priority LOW 39
Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module).
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00394 · Published 2024-09-18 · No fix listed CWE-125
Priority LOW 39
Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module).
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00394 · Published 2024-09-18 · No fix listed CWE-125
Priority LOW 39
Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module).
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00394 · Published 2024-09-18 · No fix listed CWE-125
Priority LOW 39
Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module).
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00394 · Published 2024-09-18 · No fix listed CWE-125
Priority LOW 39
Unchecked Return Value to NULL Pointer Dereference vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module).
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00443 · Published 2024-09-18 · No fix listed CWE-690
Load more
THREATIST.IORead the docs