Design/Logic Flaw

Linux foundation ONOS 1.9.0 allows unauthenticated use of websockets...

CVE-2017-1000080

Linux foundation ONOS 1.9.0 allows unauthenticated use of websockets...

CVE-2017-1000078

ONOS 1.9 is affected by a cross-site scripting (XSS) vulnerability in the device registration component. The issue is documented across multiple sources (e.g., NVD CVE-2017-1000078) with CVSS metrics indicating a network-accessible flaw requiring user interaction (UI:R) and resulting in partial i...

CVE-2017-1000081

Linux foundation ONOS 1.9.0 is vulnerable to unauthenticated upload of applications .oar resulting in remote code execution...

CVE-2017-1000079

Linux foundation ONOS 1.9.0 is vulnerable to a DoS...

CVE-2017-1000078

Linux foundation ONOS 1.9 is vulnerable to XSS in the device. registration...

CVE-2017-1000081

CVE-2017-1000081 affects Linux Foundation ONOS 1.9.0 and is due to unauthenticated upload of applications (.oar), enabling remote code execution. Primary sources (NVD) cite high/critical impacts (CVSSv2: 7.5/Partial partial integrity and availability; CVSSv3.1: 9.8 with high impact and network at...

CVE-2017-1000079

The provided connected documents confirm a denial-of-service vulnerability in Linux Foundation ONOS 1.9.0 (CVE-2017-1000079). Details explicitly present: affected product (ONOS 1.9.0), vulnerability class (DoS), and vendor/repository context. The CNVD entry states a DoS exists; NVD data lists CVS...

CVE-2017-1000080

CVE-2017-1000080 affects Linux Foundation ONOS 1.9.0. The vulnerability allows unauthenticated use of the websocket protocol, enabling an attacker to interact with ONOS WS endpoints without authentication. Associated sources (CNVD-2017-19578, NVD entry) describe exploitation as unauthenticated WS...

SDN Security Evaluation Framework: DELTA

DELTA is a penetration testing framework that regenerates known attack scenarios for diverse test cases. This framework also provides the capability of discovering unknown security problems in SDN by employing a fuzzing technique. Agent-Manager is the control tower. It takes full control over all...