CVEvulnerability
CVE-2022-29609
5.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2023-04-20
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
- Weaknesses
- CWE-670
Description
An issue was discovered in ONOS 2.5.1. An intent with the same source and destination shows the INSTALLING state, indicating that its flow rules are installing. Improper handling of such an intent is misleading to a network operator.
Affected configurations
• opennetworking onos 2.5.1
Related
Weakness · CWE (1)
- CWE-670 Always-Incorrect Control Flow Implementation weakness
References
- https://wiki.onosproject.org/display/ONOS/Intent+Framework Product
- https://www.usenix.org/system/files/sec23fall-prepub-285_kim-jiwon.pdf Exploit, Technical Description, Third Party Advisory
- https://wiki.onosproject.org/display/ONOS/Intent+Framework Product
- https://www.usenix.org/system/files/sec23fall-prepub-285_kim-jiwon.pdf Exploit, Technical Description, Third Party Advisory