Open Networking Foundation ONOS 安全漏洞

Open Networking Foundation ONOS is an open source SDN controller open sourced by Open Networking Foundation. for building next-generation SDN/NFV solutions. A security vulnerability exists in Open Networking Foundation ONOS onos-kpimon version 0.4.7, which originates from blocking the errCh chann...

CVE-2023-52728

Open Networking Foundation SD-RAN ONOS onos-lib-go 0.10.25 allows an index out-of-range condition in putBitString...

CVE-2024-34049

Open Networking Foundation SD-RAN Rimedo rimedo-ts 0.1.1 has a slice bounds out-of-range panic in "return plmnIdString0:3, plmnIdString3:" in reader.go...

Open Networking Foundation ONOS 安全漏洞

Open Networking Foundation ONOS is an open source SDN controller open sourced by Open Networking Foundation. It is used to build next-generation SDN/NFV solutions. A security vulnerability exists in Open Networking Foundation SD-RAN onos-kpimon version 0.4.7, which stems from an out-of-bounds arr...

Open Networking Foundation ONOS 安全漏洞

Open Networking Foundation ONOS is an open source SDN controller open sourced by Open Networking Foundation. It is used to build next-generation SDN/NFV solutions. A security vulnerability exists in Open Networking Foundation ONOS onos-lib-go version 0.10.25, which stems from an index out-of-boun...

PT-2024-14717 · Open Networking Foundation · Onos-Lib-Go

Name of the Vulnerable Software and Affected Versions: Open Networking Foundation SD-RAN ONOS onos-lib-go version 0.10.25 Description: The issue allows an index out-of-range condition in putBitString. There is no information provided about the estimated number of potentially affected devices...

Vulnerability of the monitoring and network equipment management system: Software for Open Networking in the Cloud (SONiC). This vulnerability stems from lack of access control measures, allowing attackers to enhance their privileges.

The vulnerability of the monitoring and management system for network equipment, Software for Open Networking in the Cloud SONiC, is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

CVE-2024-21418

Software for Open Networking in the Cloud SONiC Elevation of Privilege Vulnerability...

CVE-2024-21418

CVE-2024-21418 affects Software for Open Networking in the Cloud (SONiC). Public docs indicate an Elevation of Privilege vulnerability in SONiC components with affected versions including 201811, 201911, 202012, and 202205. Root cause details are not fully disclosed in the provided materials, but...

CVE-2024-21418 Software for Open Networking in the Cloud (SONiC) Elevation of Privilege Vulnerability

...

CVE-2024-21418 Software for Open Networking in the Cloud (SONiC) Elevation of Privilege Vulnerability

...

PT-2024-2193 · Microsoft · Sonic

Name of the Vulnerable Software and Affected Versions: Software for Open Networking in the Cloud SONiC affected versions not specified Description: The issue is related to insufficient access control in the system, which can allow an attacker to elevate their privileges. Recommendations: At the...

Vulnerabilities fixed in Microsoft Azure

Microsoft has fixed vulnerabilities in several Azure products. A malicious party could exploit the vulnerabilities to gain elevated privileges and potentially execute arbitrary code with elevated privileges, or gain access to sensitive data. The most serious vulnerability is located in the...

CVE-2023-30093

A cross-site scripting XSS vulnerability in Open Networking Foundation ONOS from version v1.9.0 to v2.7.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the url parameter of the API documentation dashboard...

Cross site scripting

A cross-site scripting XSS vulnerability in Open Networking Foundation ONOS from version v1.9.0 to v2.7.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the url parameter of the API documentation dashboard...

CVE-2023-30093

A cross-site scripting XSS vulnerability in Open Networking Foundation ONOS from version v1.9.0 to v2.7.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the url parameter of the API documentation dashboard...

PT-2023-22535 · Open Networking Foundation · Onos

Name of the Vulnerable Software and Affected Versions: Open Networking Foundation ONOS versions 1.9.0 through 2.7.0 Description: A cross-site scripting XSS vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the url parameter or...

CVE-2023-30093

CVE-2023-30093 is a cross-site scripting (XSS) vulnerability affecting Open Networking Foundation ONOS, from version v1.9.0 through v2.7.0. The issue enables execution of arbitrary web scripts/HTML via a crafted payload injected into the url parameter of the API documentation dashboard. The provi...

CVE-2023-30093

A cross-site scripting XSS vulnerability in Open Networking Foundation ONOS from version v1.9.0 to v2.7.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the url parameter of the API documentation dashboard...

Open Networking Foundation ONOS 安全漏洞

Open Networking Foundation ONOS is an open source SDN controller from Open Networking Foundation open source. It is used to build next-generation SDN/NFV solutions. A security vulnerability exists in Open Networking Foundation ONOS version 2.5.1, which originates in IntentManager, where an...