CVE-2024-51406

CVSS 6.2 MEDIUMEPSS 0.2%

Floodlight SDN Open Flow Controller v.1.2 has an issue that allows local hosts to build fake LLDP packets that allow specific clusters to be missed by Floodlight, which in turn leads to missed hosts inside and outside the cluster.

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

n/a · n/a

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://github.com/floodlight/floodlight https://github.com/floodlight/floodlight/issues/870 https://ieeexplore.ieee.org/document/10246976