İçeriğe atla
Noroxi

OpenDayLight kayıtları

opendaylight üreticisine ait 17 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
0
Düzeltme kaydı olan
%17,6
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 17
  2. 18
  3. 24

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

17 kayıt
  • CVE-2018-1132
    40Planlayın

    A flaw was found in Opendaylight's SDNInterfaceapp (SDNI).

    KritikCVSS 9,8İstismar yokEPSS %3

    opendaylight · sdninterfaceapp20 Haz 2018

  • CVE-2015-1778
    40Planlayın

    The custom authentication realm used by karaf-tomcat's "opendaylight" realm in Opendaylight before Helium SR3 will authenticate any username

    KritikCVSS 9,8İstismar yokEPSS %3

    opendaylight · opendaylight27 Haz 2017

  • CVE-2018-1078
    39İzleyin

    OpenDayLight version Carbon SR3 and earlier contain a vulnerability during node reconciliation that can result in traffic flows that should

    KritikCVSS 9,8İstismar yokEPSS %1

    opendaylight · openflow16 Mar 2018

  • CVE-2014-8149
    36İzleyin

    OpenDaylight defense4all 1.1.0 and earlier allows remote authenticated users to write report data to arbitrary files.

    YüksekCVSS 8,8İstismar yokEPSS %2

    opendaylight · defense4all27 Haz 2017

  • CVE-2015-1611
    31İzleyin

    OpenFlow plugin for OpenDaylight before Helium SR3 allows remote attackers to spoof the SDN topology and affect the flow of data, related to

    YüksekCVSS 7,5İstismar yokEPSS %2

    opendaylight · openflow4 Nis 2017

  • CVE-2015-1612
    31İzleyin

    OpenFlow plugin for OpenDaylight before Helium SR3 allows remote attackers to spoof the SDN topology and affect the flow of data, related to

    YüksekCVSS 7,5İstismar yokEPSS %2

    opendaylight · openflow4 Nis 2017

  • CVE-2017-1000411
    30İzleyin

    OpenFlow Plugin and OpenDayLight Controller versions Nitrogen, Carbon, Boron, Robert Varga, Anil Vishnoi contain a flaw when multiple 'expir

    YüksekCVSS 7,5İstismar yokEPSS %2

    opendaylight · opendaylight31 Oca 2018

  • CVE-2017-1000361
    30İzleyin

    DOMRpcImplementationNotAvailableException when sending Port-Status packets to OpenDaylight.

    YüksekCVSS 7,5İstismar yokEPSS %1

    opendaylight · opendaylight24 Nis 2017

  • CVE-2017-1000357
    30İzleyin

    Denial of Service attack when the switch rejects to receive packets from the controller.

    YüksekCVSS 7,5İstismar yokEPSS %1

    opendaylight · opendaylight24 Nis 2017

  • CVE-2017-1000406
    30İzleyin

    OpenDaylight Karaf 0.6.1-Carbon fails to clear the cache after a password change, allowing the old password to be used until the Karaf cache

    YüksekCVSS 7,5İstismar yokEPSS %1

    opendaylight · karaf30 Kas 2017

  • CVE-2024-46943
    30İzleyin

    An issue was discovered in OpenDaylight Authentication, Authorization and Accounting (AAA) through 0.19.3.

    YüksekCVSS 7,5İstismar yokEPSS %1

    opendaylight · authentication\, authorization and accounting15 Eyl 2024

  • CVE-2014-5035
    28İzleyin

    The Netconf (TCP) service in OpenDaylight 1.0 allows remote attackers to read arbitrary files via an XML external entity declaration in conj

    OrtaCVSS 6,8İstismar yokEPSS %2

    opendaylight · opendaylight26 Ağu 2014

  • CVE-2017-1000358
    26İzleyin

    Controller throws an exception and does not allow user to add subsequent flow for a particular switch.

    OrtaCVSS 6,5İstismar yokEPSS %1

    opendaylight · opendaylight24 Nis 2017

  • CVE-2024-46942
    26İzleyin

    In OpenDaylight Model-Driven Service Abstraction Layer (MD-SAL) through 13.0.1, a controller with a follower role can configure flow entries

    OrtaCVSS 6,5İstismar yokEPSS %0

    opendaylight · model-driven service abstraction layer15 Eyl 2024

  • CVE-2015-1610
    21İzleyin

    hosttracker in OpenDaylight l2switch allows remote attackers to change the host location information by spoofing the MAC address, aka "topol

    OrtaCVSS 5,3İstismar yokEPSS %1

    opendaylight · l2switch20 Mar 2017

  • CVE-2017-1000360
    21İzleyin

    StreamCorruptedException and NullPointerException in OpenDaylight odl-mdsal-xsql.

    OrtaCVSS 5,3İstismar yokEPSS %1

    opendaylight · opendaylight24 Nis 2017

  • CVE-2017-1000359
    21İzleyin

    Java out of memory error and significant increase in resource consumption.

    OrtaCVSS 5,3İstismar yokEPSS %1

    opendaylight · opendaylight24 Nis 2017