CVE-2017-1000080: Undefined Security Weakness

Linux foundation ONOS 1.9.0 allows unauthenticated use of websockets...

CVE-2017-1000078: Improper Neutralization of Input During Web Page Generation

Linux foundation ONOS 1.9 is vulnerable to XSS in the device. registration...

CVE-2017-1000078

Linux foundation ONOS 1.9 is vulnerable to XSS in the device. registration...

CVE-2017-1000079

Linux foundation ONOS 1.9.0 is vulnerable to a DoS...

CVE-2017-1000080

Linux foundation ONOS 1.9.0 allows unauthenticated use of websockets...

CVE-2017-1000081

Linux foundation ONOS 1.9.0 is vulnerable to unauthenticated upload of applications .oar resulting in remote code execution...

CVE-2017-1000078

ONOS 1.9 is affected by a cross-site scripting (XSS) vulnerability in the device registration component. The issue is documented across multiple sources (e.g., NVD CVE-2017-1000078) with CVSS metrics indicating a network-accessible flaw requiring user interaction (UI:R) and resulting in partial i...

CVE-2017-1000080

CVE-2017-1000080 affects Linux Foundation ONOS 1.9.0. The vulnerability allows unauthenticated use of the websocket protocol, enabling an attacker to interact with ONOS WS endpoints without authentication. Associated sources (CNVD-2017-19578, NVD entry) describe exploitation as unauthenticated WS...

CVE-2017-1000081

CVE-2017-1000081 affects Linux Foundation ONOS 1.9.0 and is due to unauthenticated upload of applications (.oar), enabling remote code execution. Primary sources (NVD) cite high/critical impacts (CVSSv2: 7.5/Partial partial integrity and availability; CVSSv3.1: 9.8 with high impact and network at...

CVE-2017-1000081

Linux foundation ONOS 1.9.0 is vulnerable to unauthenticated upload of applications .oar resulting in remote code execution...

CVE-2017-1000078

Linux foundation ONOS 1.9 is vulnerable to XSS in the device. registration...

CVE-2017-1000080

Linux foundation ONOS 1.9.0 allows unauthenticated use of websockets...

CVE-2017-1000079

Linux foundation ONOS 1.9.0 is vulnerable to a DoS...

CVE-2017-1000079

The provided connected documents confirm a denial-of-service vulnerability in Linux Foundation ONOS 1.9.0 (CVE-2017-1000079). Details explicitly present: affected product (ONOS 1.9.0), vulnerability class (DoS), and vendor/repository context. The CNVD entry states a DoS exists; NVD data lists CVS...

PT-2017-10785

Name of the Vulnerable Software and Affected Versions ONOS version 1.9 Description The issue affects the device registration process, where an XSS vulnerability is present. Recommendations For ONOS version 1.9, update to a newer version that contains a fix for this issue...

PT-2017-10788

Name of the Vulnerable Software and Affected Versions Linux foundation ONOS version 1.9.0 Description The issue allows for unauthenticated upload of applications .oar, resulting in remote code execution. Recommendations For Linux foundation ONOS version 1.9.0, consider restricting access to the...

PT-2017-10786

Name of the Vulnerable Software and Affected Versions Linux foundation ONOS version 1.9.0 Description The issue is related to a Denial of Service DoS problem. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue w...

PT-2017-10787

Name of the Vulnerable Software and Affected Versions Linux foundation ONOS version 1.9.0 Description The issue allows unauthenticated use of websockets. Recommendations For Linux foundation ONOS version 1.9.0, consider disabling the use of websockets until a patch is available...

SDN Security Evaluation Framework: DELTA

DELTA is a penetration testing framework that regenerates known attack scenarios for diverse test cases. This framework also provides the capability of discovering unknown security problems in SDN by employing a fuzzing technique. Agent-Manager is the control tower. It takes full control over all...