The vulnerability of the createFlow() and createFlows() functions (FlowWebResource.java) of the RESTful operating system-based service of Open Network Operating System allows a hacker to arbitrarily modify the settings of the switch.

The vulnerability of the createFlow and createFlows functions FlowWebResource.java of the RESTful operating system service of Open Network Operating System is caused by a numerical overflow. Exploiting this vulnerability could allow an attacker to arbitrarily modify the settings of the switch...