CVE-2022-29606: Opennetworking Onos

Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days.

An issue was discovered in ONOS 2.5.1. An intent with a large port number shows the CORRUPT state, which is misleading to a network operator. Improper handling of such port numbers causes inconsistency between intent and flow rules in the network.

Affected products

• Opennetworking Onos: version 2.5.1 only

Published 2023-04-20. Last modified 2026-06-17.