EUVD-2022-33935

Malicious code in bioql PyPI...

CVE-2023-41591

An issue in Open Network Foundation ONOS v2.7.0 allows attackers to create fake IP/MAC addresses and potentially execute a man-in-the-middle attack on communications between fake and real hosts...

CVE-2024-53423

An issue in Open Network Foundation ONOS v2.7.0 allows attackers to cause a Denial of Service DoS via supplying crafted packets...

User Impersonation

Overview org.onosproject:onos-core-net is an ONOS network control core subsystem. Affected versions of this package are vulnerable to User Impersonation through the manipulation of IP/MAC address mappings. An attacker can send crafted messages containing spoofed IP/MAC addresses, replacing those ...

org.onosproject:onos-drivers-arista (>=1.7.0, <=1.8.9), org.onosproject:onos-drivers-ciena (>=1.7.0, <=1.8.9) +13 more potentially affected by CVE-2023-41591 via org.onosproject:onos-core-net (>=1.7.0, <=2.5.7-rc2)

org.onosproject:onos-core-net MAVEN version =1.7.0, =1.7.0, =1.7.0, =1.7.0, =1.7.0, =1.7.0, =1.7.0, =1.8.0, =1.7.1, =1.7.0, =1.7.0, =1.7.0, =1.7.0, =3.0.0, =3.0.0, =3.0.0, =4.0.0 Source cves: CVE-2023-41591 Source advisory: SNYK:JAVA-ORGONOSPROJECT-10658543...

CVE-2023-41591

An issue in Open Network Foundation ONOS v2.7.0 allows attackers to create fake IP/MAC addresses and potentially execute a man-in-the-middle attack on communications between fake and real hosts...

CVE-2024-53423

An issue in Open Network Foundation ONOS v2.7.0 allows attackers to cause a Denial of Service DoS via supplying crafted packets...

PT-2025-23185 · Open Networking Foundation · Onos

Name of the Vulnerable Software and Affected Versions: Open Network Foundation ONOS version 2.7.0 Description: The issue allows attackers to create fake IP/MAC addresses, potentially enabling a man-in-the-middle attack on communications between fake and real hosts. Recommendations: For Open Netwo...

PT-2025-23186 · Open Networking Foundation · Onos

Name of the Vulnerable Software and Affected Versions: Open Network Foundation ONOS version 2.7.0 Description: The issue allows attackers to cause a Denial of Service DoS via supplying crafted packets. Recommendations: For Open Network Foundation ONOS version 2.7.0, at the moment, there is no...

CVE-2024-53423: Uncontrolled Resource Consumption

An issue in Open Network Foundation ONOS v2.7.0 allows attackers to cause a Denial of Service DoS via supplying crafted packets...

CVE-2023-41591

An issue in Open Network Foundation ONOS v2.7.0 allows attackers to create fake IP/MAC addresses and potentially execute a man-in-the-middle attack on communications between fake and real hosts...

CVE-2023-41591

The Open Network Foundation ONOS (specifically version v2.7.0 ) is vulnerable to User Impersonation via the org.onosproject:onos-core-net subsystem. An attacker can send crafted messages containing spoofed IP/MAC addresses to replace those of known hosts, enabling a man-in-the-middle attack on co...

CVE-2023-41591: Authentication Bypass by Spoofing

An issue in Open Network Foundation ONOS v2.7.0 allows attackers to create fake IP/MAC addresses and potentially execute a man-in-the-middle attack on communications between fake and real hosts...

CVE-2024-53423

An issue in Open Network Foundation ONOS v2.7.0 allows an attacker to trigger a Denial of Service (DoS) by supplying crafted packets . The vulnerability is characterized as uncontrolled resource consumption (CWE-400). While specific technical details regarding the affected component or file are n...

Open Networking Foundation ONOS 安全漏洞

Open Networking Foundation ONOS is an open source SDN controller open sourced by Open Networking Foundation. for building next-generation SDN/NFV solutions. A security vulnerability exists in Open Networking Foundation ONOS version v2.7.0, which stems from an attacker's ability to create a fake I...

CVE-2024-53423

An issue in Open Network Foundation ONOS v2.7.0 allows attackers to cause a Denial of Service DoS via supplying crafted packets...

CVE-2024-53423

An issue in Open Network Foundation ONOS v2.7.0 allows attackers to cause a Denial of Service DoS via supplying crafted packets...

CVE-2024-53423

An issue in Open Network Foundation ONOS v2.7.0 allows attackers to cause a Denial of Service DoS via supplying crafted packets...

CVE-2023-41591

An issue in Open Network Foundation ONOS v2.7.0 allows attackers to create fake IP/MAC addresses and potentially execute a man-in-the-middle attack on communications between fake and real hosts...

CVE-2024-48809

An issue in Open Networking Foundations sdran-in-a-box v.1.4.3 and onos-a1t v.0.2.3 allows a remote attacker to cause a denial of service via the onos-a1t component of the sdran-in-a-box, specifically the DeleteWatcher function...