CVE-2024-37018

1976-01-0100:00:00

mitre

github.com

AI Score

6.9

Confidence

High

SSVC

Exploitation

none

Automatable

yes

Technical Impact

total

JSON

The OpenDaylight 0.15.3 controller allows topology poisoning via API requests because an application can manipulate the path that is taken by discovery packets.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:linuxfoundation:opendaylight:0.15.3:*:*:*:*:*:*:*"
    ],
    "vendor": "linuxfoundation",
    "product": "opendaylight",
    "versions": [
      {
        "status": "affected",
        "version": "0.15.3"
      }
    ],
    "defaultStatus": "unknown"
  }
]