CVE-2021-38364: Opennetworking Onos

Medium severity, CVSS 6.5. EPSS: 0.8% chance of exploitation in the next 30 days.

An issue was discovered in ONOS 2.5.1. There is an incorrect comparison of flow rules installed by intents. A remote attacker can install or remove a new intent, and consequently modify or delete the existing flow rules related to other intents.

Affected products

• Opennetworking Onos: version 2.5.1 only

Published 2023-04-20. Last modified 2026-06-17.