EUVD-2022-33939

Malicious code in bioql PyPI...

CVE-2023-41591

An issue in Open Network Foundation ONOS v2.7.0 allows attackers to create fake IP/MAC addresses and potentially execute a man-in-the-middle attack on communications between fake and real hosts...

CVE-2024-53423

An issue in Open Network Foundation ONOS v2.7.0 allows attackers to cause a Denial of Service DoS via supplying crafted packets...

User Impersonation

Overview org.onosproject:onos-core-net is an ONOS network control core subsystem. Affected versions of this package are vulnerable to User Impersonation through the manipulation of IP/MAC address mappings. An attacker can send crafted messages containing spoofed IP/MAC addresses, replacing those ...

org.onosproject:onos-drivers-arista (>=1.7.0, <=1.8.9), org.onosproject:onos-drivers-ciena (>=1.7.0, <=1.8.9) +13 more potentially affected by CVE-2023-41591 via org.onosproject:onos-core-net (>=1.7.0, <=2.5.7-rc2)

org.onosproject:onos-core-net MAVEN version =1.7.0, =1.7.0, =1.7.0, =1.7.0, =1.7.0, =1.7.0, =1.7.0, =1.8.0, =1.7.1, =1.7.0, =1.7.0, =1.7.0, =1.7.0, =3.0.0, =3.0.0, =3.0.0, =4.0.0 Source cves: CVE-2023-41591 Source advisory: SNYK:JAVA-ORGONOSPROJECT-10658543...

CVE-2023-41591

An issue in Open Network Foundation ONOS v2.7.0 allows attackers to create fake IP/MAC addresses and potentially execute a man-in-the-middle attack on communications between fake and real hosts...

CVE-2024-53423

An issue in Open Network Foundation ONOS v2.7.0 allows attackers to cause a Denial of Service DoS via supplying crafted packets...

CVE-2023-41591

An issue in Open Network Foundation ONOS v2.7.0 allows attackers to create fake IP/MAC addresses and potentially execute a man-in-the-middle attack on communications between fake and real hosts...

PT-2025-23186 · Open Networking Foundation · Onos

Name of the Vulnerable Software and Affected Versions: Open Network Foundation ONOS version 2.7.0 Description: The issue allows attackers to cause a Denial of Service DoS via supplying crafted packets. Recommendations: For Open Network Foundation ONOS version 2.7.0, at the moment, there is no...

PT-2025-23185 · Open Networking Foundation · Onos

Name of the Vulnerable Software and Affected Versions: Open Network Foundation ONOS version 2.7.0 Description: The issue allows attackers to create fake IP/MAC addresses, potentially enabling a man-in-the-middle attack on communications between fake and real hosts. Recommendations: For Open Netwo...

CVE-2023-41591

CVE-2023-41591 affects Open Network Foundation ONOS v2.7.0. The issue allows an attacker to create fake IP/MAC addresses, enabling potential man-in-the-middle attacks between spoofed and legitimate hosts. The Red Hat and NVD/NVDA references describe the same impact. Snyk reports org.onosproject:o...

CVE-2024-53423

CVE-2024-53423 concerns Open Network Foundation ONOS v2.7.0 where attackers can cause a Denial of Service by sending crafted packets. The entry is supported by multiple sources (NVD, CVE records, Red Hat advisory, OSV, CNNVD, PT Security). CVSS v3.1 base score is 5.6 (Network, Low/Low/Low impacts...

CVE-2024-53423

An issue in Open Network Foundation ONOS v2.7.0 allows attackers to cause a Denial of Service DoS via supplying crafted packets...

CVE-2023-41591

An issue in Open Network Foundation ONOS v2.7.0 allows attackers to create fake IP/MAC addresses and potentially execute a man-in-the-middle attack on communications between fake and real hosts...

CVE-2024-53423

An issue in Open Network Foundation ONOS v2.7.0 allows attackers to cause a Denial of Service DoS via supplying crafted packets...

Open Networking Foundation ONOS 安全漏洞

Open Networking Foundation ONOS is an open source SDN controller open sourced by Open Networking Foundation. for building next-generation SDN/NFV solutions. A security vulnerability exists in Open Networking Foundation ONOS version v2.7.0, which stems from an attacker's ability to create a fake I...

CVE-2024-53423

An issue in Open Network Foundation ONOS v2.7.0 allows attackers to cause a Denial of Service DoS via supplying crafted packets...

CVE-2024-48809

An issue in Open Networking Foundations sdran-in-a-box v.1.4.3 and onos-a1t v.0.2.3 allows a remote attacker to cause a denial of service via the onos-a1t component of the sdran-in-a-box, specifically the DeleteWatcher function...

CVE-2023-30093

A cross-site scripting XSS vulnerability in Open Networking Foundation ONOS from version v1.9.0 to v2.7.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the url parameter of the API documentation dashboard...

CVE-2023-24279

A cross-site scripting XSS vulnerability in Open Networking Foundation ONOS from version v1.9.0 to v2.7.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the url parameter of the API documentation dashboard...