Skip to content
Noroxi

OpenDayLight records

17 published records for vendor opendaylight.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
17.6%
Median publish → KEV
No record has entered KEV

Records by year

  1. 17
  2. 18
  3. 24

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

17 records
  • CVE-2018-1132
    40Plan

    A flaw was found in Opendaylight's SDNInterfaceapp (SDNI).

    CriticalCVSS 9.8No exploitEPSS 2%

    opendaylight · sdninterfaceappJun 20, 2018

  • CVE-2015-1778
    40Plan

    The custom authentication realm used by karaf-tomcat's "opendaylight" realm in Opendaylight before Helium SR3 will authenticate any username

    CriticalCVSS 9.8No exploitEPSS 2%

    opendaylight · opendaylightJun 27, 2017

  • CVE-2018-1078
    39Monitor

    OpenDayLight version Carbon SR3 and earlier contain a vulnerability during node reconciliation that can result in traffic flows that should

    CriticalCVSS 9.8No exploitEPSS 1%

    opendaylight · openflowMar 16, 2018

  • CVE-2014-8149
    36Monitor

    OpenDaylight defense4all 1.1.0 and earlier allows remote authenticated users to write report data to arbitrary files.

    HighCVSS 8.8No exploitEPSS 1%

    opendaylight · defense4allJun 27, 2017

  • CVE-2015-1611
    31Monitor

    OpenFlow plugin for OpenDaylight before Helium SR3 allows remote attackers to spoof the SDN topology and affect the flow of data, related to

    HighCVSS 7.5No exploitEPSS 2%

    opendaylight · openflowApr 4, 2017

  • CVE-2015-1612
    31Monitor

    OpenFlow plugin for OpenDaylight before Helium SR3 allows remote attackers to spoof the SDN topology and affect the flow of data, related to

    HighCVSS 7.5No exploitEPSS 2%

    opendaylight · openflowApr 4, 2017

  • CVE-2017-1000411
    30Monitor

    OpenFlow Plugin and OpenDayLight Controller versions Nitrogen, Carbon, Boron, Robert Varga, Anil Vishnoi contain a flaw when multiple 'expir

    HighCVSS 7.5No exploitEPSS 1%

    opendaylight · opendaylightJan 31, 2018

  • CVE-2017-1000361
    30Monitor

    DOMRpcImplementationNotAvailableException when sending Port-Status packets to OpenDaylight.

    HighCVSS 7.5No exploitEPSS 1%

    opendaylight · opendaylightApr 24, 2017

  • CVE-2017-1000357
    30Monitor

    Denial of Service attack when the switch rejects to receive packets from the controller.

    HighCVSS 7.5No exploitEPSS 1%

    opendaylight · opendaylightApr 24, 2017

  • CVE-2017-1000406
    30Monitor

    OpenDaylight Karaf 0.6.1-Carbon fails to clear the cache after a password change, allowing the old password to be used until the Karaf cache

    HighCVSS 7.5No exploitEPSS 1%

    opendaylight · karafNov 30, 2017

  • CVE-2024-46943
    30Monitor

    An issue was discovered in OpenDaylight Authentication, Authorization and Accounting (AAA) through 0.19.3.

    HighCVSS 7.5No exploitEPSS 0%

    opendaylight · authentication\, authorization and accountingSep 15, 2024

  • CVE-2014-5035
    28Monitor

    The Netconf (TCP) service in OpenDaylight 1.0 allows remote attackers to read arbitrary files via an XML external entity declaration in conj

    MediumCVSS 6.8No exploitEPSS 2%

    opendaylight · opendaylightAug 26, 2014

  • CVE-2017-1000358
    26Monitor

    Controller throws an exception and does not allow user to add subsequent flow for a particular switch.

    MediumCVSS 6.5No exploitEPSS 1%

    opendaylight · opendaylightApr 24, 2017

  • CVE-2024-46942
    26Monitor

    In OpenDaylight Model-Driven Service Abstraction Layer (MD-SAL) through 13.0.1, a controller with a follower role can configure flow entries

    MediumCVSS 6.5No exploitEPSS 0%

    opendaylight · model-driven service abstraction layerSep 15, 2024

  • CVE-2015-1610
    21Monitor

    hosttracker in OpenDaylight l2switch allows remote attackers to change the host location information by spoofing the MAC address, aka "topol

    MediumCVSS 5.3No exploitEPSS 1%

    opendaylight · l2switchMar 20, 2017

  • CVE-2017-1000360
    21Monitor

    StreamCorruptedException and NullPointerException in OpenDaylight odl-mdsal-xsql.

    MediumCVSS 5.3No exploitEPSS 1%

    opendaylight · opendaylightApr 24, 2017

  • CVE-2017-1000359
    21Monitor

    Java out of memory error and significant increase in resource consumption.

    MediumCVSS 5.3No exploitEPSS 1%

    opendaylight · opendaylightApr 24, 2017