Lucene search

MitreCVE-2022-29605

HistoryApr 20, 2023 - 1:15 p.m.

CVE-2022-29605

2023-04-2013:15:07

CWE-670

mitre

web.nvd.nist.gov

cve-2022-29605

onos

ipv6

openflow

network operator

nvd

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

AI Score

7.4

Confidence

High

EPSS

0.002

Percentile

58.9%

JSON

An issue was discovered in ONOS 2.5.1. IntentManager attempts to install the IPv6 flow rules of an intent into an OpenFlow 1.0 switch that does not support IPv6. Improper handling of the difference in capabilities of the intent and switch is misleading to a network operator.

Affected configurations

Nvd

Node

opennetworkingonosMatch2.5.1

VendorProductVersionCPE
opennetworkingonos2.5.1cpe:2.3:a:opennetworking:onos:2.5.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
opennetworking	onos	2.5.1	cpe:2.3:a:opennetworking:onos:2.5.1:::::::*

References

wiki.onosproject.org/display/ONOS/Intent+Framework

www.usenix.org/system/files/sec23fall-prepub-285_kim-jiwon.pdf

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

AI Score

7.4

Confidence

High

EPSS

0.002

Percentile

58.9%

JSON

Related for CVE-2022-29605