CVE-2017-1000078

Linux foundation ONOS 1.9 is vulnerable to XSS in the device. registration...

CVE-2017-1000079

The provided connected documents confirm a denial-of-service vulnerability in Linux Foundation ONOS 1.9.0 (CVE-2017-1000079). Details explicitly present: affected product (ONOS 1.9.0), vulnerability class (DoS), and vendor/repository context. The CNVD entry states a DoS exists; NVD data lists CVS...

CVE-2017-1000080

CVE-2017-1000080 affects Linux Foundation ONOS 1.9.0. The vulnerability allows unauthenticated use of the websocket protocol, enabling an attacker to interact with ONOS WS endpoints without authentication. Associated sources (CNVD-2017-19578, NVD entry) describe exploitation as unauthenticated WS...

PT-2017-10788

Name of the Vulnerable Software and Affected Versions Linux foundation ONOS version 1.9.0 Description The issue allows for unauthenticated upload of applications .oar, resulting in remote code execution. Recommendations For Linux foundation ONOS version 1.9.0, consider restricting access to the...

SDN Security Evaluation Framework: DELTA

DELTA is a penetration testing framework that regenerates known attack scenarios for diverse test cases. This framework also provides the capability of discovering unknown security problems in SDN by employing a fuzzing technique. Agent-Manager is the control tower. It takes full control over all...