← back
CVE-2022-29604

CVE-2022-29604

CVSS 9.8 CRITICALEPSS 1.0%CWE-178
An issue was discovered in ONOS 2.5.1. An intent with an uppercase letter in a device ID shows the CORRUPT state, which is misleading to a network operator. Improper handling of case sensitivity causes inconsistency between intent and flow rules in the network.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
n/a · n/a

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://wiki.onosproject.org/display/ONOS/Intent+Frameworkhttps://www.usenix.org/system/files/sec23fall-prepub-285_kim-jiwon.pdf