← back
CVE-2022-29607

CVE-2022-29607

CVSS 7.5 HIGHEPSS 0.7%CWE-670
An issue was discovered in ONOS 2.5.1. Modification of an existing intent to have the same source and destination shows the INSTALLED state without any flow rule. Improper handling of such an intent is misleading to a network operator.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Affected products
n/a · n/a

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://wiki.onosproject.org/display/ONOS/Intent+Frameworkhttps://www.usenix.org/system/files/sec23fall-prepub-285_kim-jiwon.pdf