CVE-2023-41591: Opennetworking Onos

Critical severity, CVSS 9.8. EPSS: 0.4% chance of exploitation in the next 30 days.

An issue in Open Network Foundation ONOS v2.7.0 allows attackers to create fake IP/MAC addresses and potentially execute a man-in-the-middle attack on communications between fake and real hosts.

Affected products

• Opennetworking Onos: version 2.7.0 only

Published 2025-05-29. Last modified 2026-06-17.