Lucene search

K
cveMitreCVE-2022-29607
HistoryApr 20, 2023 - 1:15 p.m.

CVE-2022-29607

2023-04-2013:15:07
CWE-670
mitre
web.nvd.nist.gov
20
onos
network operator
security
cve-2022-29607
nvd

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

AI Score

7.4

Confidence

High

EPSS

0.002

Percentile

58.9%

An issue was discovered in ONOS 2.5.1. Modification of an existing intent to have the same source and destination shows the INSTALLED state without any flow rule. Improper handling of such an intent is misleading to a network operator.

Affected configurations

Nvd
Node
opennetworkingonosMatch2.5.1
VendorProductVersionCPE
opennetworkingonos2.5.1cpe:2.3:a:opennetworking:onos:2.5.1:*:*:*:*:*:*:*

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

AI Score

7.4

Confidence

High

EPSS

0.002

Percentile

58.9%

Related for CVE-2022-29607