CVE-2022-29604: Opennetworking Onos

Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days.

An issue was discovered in ONOS 2.5.1. An intent with an uppercase letter in a device ID shows the CORRUPT state, which is misleading to a network operator. Improper handling of case sensitivity causes inconsistency between intent and flow rules in the network.

Affected products

• Opennetworking Onos: version 2.5.1 only

Published 2023-04-20. Last modified 2026-06-17.