Remote code execution

2017-07-1713:18:00

PRIOn knowledge base

www.prio-n.com

9.7 High

AI Score

Confidence

High

0.015 Low

EPSS

Percentile

87.1%

Linux foundation ONOS 1.9.0 is vulnerable to unauthenticated upload of applications (.oar) resulting in remote code execution.

CPENameOperatorVersion
onoseq1.8.0
onoseq1.9.0

CPE	Name	Operator	Version
	onos	eq	1.8.0
	onos	eq	1.9.0

References

wiki.onosproject.org/display/ONOS/Security+advisories