CVEvulnerability
CVE-2022-29607
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2023-04-20
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
- Weaknesses
- CWE-670
Description
An issue was discovered in ONOS 2.5.1. Modification of an existing intent to have the same source and destination shows the INSTALLED state without any flow rule. Improper handling of such an intent is misleading to a network operator.
Affected configurations
• opennetworking onos 2.5.1
Related
Weakness · CWE (1)
- CWE-670 Always-Incorrect Control Flow Implementation weakness
References
- https://wiki.onosproject.org/display/ONOS/Intent+Framework Product
- https://www.usenix.org/system/files/sec23fall-prepub-285_kim-jiwon.pdf Exploit, Technical Description, Third Party Advisory
- https://wiki.onosproject.org/display/ONOS/Intent+Framework Product
- https://www.usenix.org/system/files/sec23fall-prepub-285_kim-jiwon.pdf Exploit, Technical Description, Third Party Advisory