📦 Onos

CVE-2023-41591 is an authentication bypass vulnerability in ONOS SDN controller that allows attackers to spoof IP/MAC addresses. This enables man-in-the-middle attacks on network communications betwee...

This vulnerability in ONOS (Open Network Operating System) v2.7.0 allows attackers to trigger unexpected behavior in devices connected to legacy switches by manipulating link types from indirect to di...

A critical vulnerability in ONOS v2.7.0 allows attackers to execute arbitrary commands or access network information by sending a specially crafted LLDP packet. This affects any system running the vul...

This vulnerability in ONOS (Open Network Operating System) causes improper handling of case sensitivity in device IDs, leading to misleading CORRUPT state displays for intents with uppercase letters. ...

A vulnerability in ONOS 2.5.1 allows network operators to create intents with large port numbers that cause system inconsistencies. When exploited, this leads to misleading CORRUPT state displays and ...

This vulnerability in ONOS (Open Network Operating System) allows attackers to create network loops by crafting malicious intents with intermediate port specifications. This affects organizations usin...

This vulnerability in ONOS (Open Network Operating System) allows memory exhaustion through orphaned intents that cannot be cleaned up. When an intent installation fails with an exception, it remains ...

A vulnerability in ONOS 2.5.1's intent framework causes purge-requested intents to remain active but unresponsive to topology changes like link failures. This can lead to network management failures w...