Linuxfoundation Open Network Operating System vulnerabilities

11 CVEs affecting Linuxfoundation Open Network Operating System, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-16302, published 2020-02-20.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-1010245, published 2019-07-19. Critical severity, CVSS 9.8. EPSS: 3.6% chance of exploitation in the next 30 days. The Linux Foundation ONOS SDN Controller 1.15 and earlier versions is affected by: Improper Input Validation. The impact is: A remote attacker can execute arbitrary commands on the controller. The…
CVE-2019-16300, published 2020-02-20. High severity, CVSS 7.5. EPSS: 2% chance of exploitation in the next 30 days. An issue was discovered in Open Network Operating System (ONOS) 1.14. In the access control application (org.onosproject.acl), the host event listener does not handle the following event types:…
CVE-2019-16302, published 2020-02-20. High severity, CVSS 7.5. EPSS: 1.7% chance of exploitation in the next 30 days. An issue was discovered in Open Network Operating System (ONOS) 1.14. In the Ethernet VPN application (org.onosproject.evpnopenflow), the host event listener does not handle the following event…
CVE-2019-16301, published 2020-02-20. High severity, CVSS 7.5. EPSS: 1.7% chance of exploitation in the next 30 days. An issue was discovered in Open Network Operating System (ONOS) 1.14. In the virtual tenant network application (org.onosproject.vtn), the host event listener does not handle the following event…
CVE-2019-16299, published 2020-02-20. High severity, CVSS 7.5. EPSS: 1.7% chance of exploitation in the next 30 days. An issue was discovered in Open Network Operating System (ONOS) 1.14. In the mobility application (org.onosproject.mobility), the host event listener does not handle the following event types:…
CVE-2019-16298, published 2020-02-20. High severity, CVSS 7.5. EPSS: 1.7% chance of exploitation in the next 30 days. An issue was discovered in Open Network Operating System (ONOS) 1.14. In the virtual broadband network gateway application (org.onosproject.virtualbng), the host event listener does not handle the…
CVE-2019-16297, published 2020-02-20. High severity, CVSS 7.5. EPSS: 1.7% chance of exploitation in the next 30 days. An issue was discovered in Open Network Operating System (ONOS) 1.14. In the P4 tutorial application (org.onosproject.p4tutorial), the host event listener does not handle the following event types:…
CVE-2019-1010234, published 2019-07-22. Critical severity, CVSS 9.8. EPSS: 1.7% chance of exploitation in the next 30 days. The Linux Foundation ONOS 1.15.0 and ealier is affected by: Improper Input Validation. The impact is: The attacker can remotely execute any commands by sending malicious http request to the…
CVE-2019-1010252, published 2019-07-18. Medium severity, CVSS 4.9. EPSS: 1.1% chance of exploitation in the next 30 days. The Linux Foundation ONOS 2.0.0 and earlier is affected by: Poor Input-validation. The impact is: A network administrator (or attacker) can install unintended flow rules in the switch by mistake. The…
CVE-2019-1010250, published 2019-07-18. Medium severity, CVSS 4.9. EPSS: 1.1% chance of exploitation in the next 30 days. The Linux Foundation ONOS 2.0.0 and earlier is affected by: Poor Input-validation. The impact is: A network administrator (or attacker) can install unintended flow rules in the switch by mistake. The…