opennetworking records
63 published records for vendor opennetworking.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 2
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-125 Out-of-bounds Read29
- CWE-690 Unchecked Return Value to NULL Pointer Dereference9
- CWE-670 Always-Incorrect Control Flow Implementation4
- CWE-476 NULL Pointer Dereference3
- CWE-400 Uncontrolled Resource Consumption3
- CWE-290 Authentication Bypass by Spoofing2
The weakness classes this vendor ships most often: where to look.
CWEAll records
63 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
39Monitor | CVE-2018-1000155No exploit | OpenFlow version 1.0 onwards contains a Denial of Service and Improper authorization vulnerability in OpenFlow handshake: The DPID (DataPathopennetworking · openflow · CWE-863 | Critical9.8 | — | 1.1% | May 24, 2018 |
39Monitor | CVE-2022-29604No exploit | An issue was discovered in ONOS 2.5.1.opennetworking · onos · CWE-178 | Critical9.8 | — | 1.0% | Apr 20, 2023 |
39Monitor | CVE-2022-29606No exploit | An issue was discovered in ONOS 2.5.1.opennetworking · onos · CWE-20 | Critical9.8 | — | 0.9% | Apr 20, 2023 |
39Monitor | CVE-2025-29310No exploit | An issue in onos v2.7.0 allows attackers to trigger a packet deserialization problem when supplying a crafted LLDP packet.opennetworking · onos · CWE-502 | Critical9.8 | — | 0.5% | Mar 24, 2025 |
39Monitor | CVE-2023-41591No exploit | An issue in Open Network Foundation ONOS v2.7.0 allows attackers to create fake IP/MAC addresses and potentially execute a man-in-the-middleopennetworking · onos · CWE-290 | Critical9.8 | — | 0.4% | May 29, 2025 |
36Monitor | CVE-2025-29312No exploit | An issue in onos v2.7.0 allows attackers to trigger unexpected behavior within a device connected to a legacy switch via changing the link topennetworking · onos · CWE-670 | Critical9.1 | — | 0.4% | Mar 24, 2025 |
30Monitor | CVE-2019-11189No exploit | Authentication Bypass by Spoofing in org.onosproject.acl (access control) and org.onosproject.mobility (host mobility) in ONOS v2.0 and earlopennetworking · onos · CWE-290 | High7.5 | — | 1.0% | Feb 20, 2020 |
30Monitor | CVE-2022-29608No exploit | An issue was discovered in ONOS 2.5.1.opennetworking · onos | High7.5 | — | 0.8% | Apr 20, 2023 |
30Monitor | CVE-2022-24035No exploit | An issue was discovered in ONOS 2.5.1.opennetworking · onos · CWE-400 | High7.5 | — | 0.8% | Apr 20, 2023 |
30Monitor | CVE-2022-29607No exploit | An issue was discovered in ONOS 2.5.1.opennetworking · onos · CWE-670 | High7.5 | — | 0.6% | Apr 20, 2023 |
30Monitor | CVE-2021-38363No exploit | An issue was discovered in ONOS 2.5.1.opennetworking · onos · CWE-755 | High7.5 | — | 0.6% | Apr 20, 2023 |
30Monitor | CVE-2022-29605No exploit | An issue was discovered in ONOS 2.5.1.opennetworking · onos · CWE-670 | High7.5 | — | 0.6% | Apr 20, 2023 |
30Monitor | CVE-2024-48809No exploit | An issue in Open Networking Foundations sdran-in-a-box v.1.4.3 and onos-a1t v.0.2.3 allows a remote attacker to cause a denial of service viopennetworking · onos-a1t · CWE-770 | High7.5 | — | 0.6% | Nov 4, 2024 |
30Monitor | CVE-2024-31175No exploit | NULL Pointer Dereference in libfluid_msg libraryopennetworking · libfluid msg · CWE-690 | High7.5 | — | 0.5% | Sep 18, 2024 |
30Monitor | CVE-2024-31167No exploit | NULL Pointer Dereference in libfluid_msg libraryopennetworking · libfluid msg · CWE-690 | High7.5 | — | 0.5% | Sep 18, 2024 |
30Monitor | CVE-2024-31165No exploit | NULL Pointer Dereference in libfluid_msg libraryopennetworking · libfluid msg · CWE-690 | High7.5 | — | 0.5% | Sep 18, 2024 |
30Monitor | CVE-2024-31164No exploit | NULL Pointer Dereference in libfluid_msg libraryopennetworking · libfluid msg · CWE-690 | High7.5 | — | 0.5% | Sep 18, 2024 |
30Monitor | CVE-2024-23916No exploit | NULL Pointer Dereference in libfluid_msg libraryopennetworking · libfluid msg · CWE-690 | High7.5 | — | 0.5% | Sep 18, 2024 |
30Monitor | CVE-2024-23915No exploit | NULL Pointer Dereference in libfluid_msg libraryopennetworking · libfluid msg · CWE-690 | High7.5 | — | 0.5% | Sep 18, 2024 |
30Monitor | CVE-2024-31171No exploit | Out-of-bounds Read in libfluid_msg libraryopennetworking · libfluid msg · CWE-125 | High7.5 | — | 0.4% | Sep 18, 2024 |
30Monitor | CVE-2024-31172No exploit | Out-of-bounds Read in libfluid_msg libraryopennetworking · libfluid msg · CWE-125 | High7.5 | — | 0.4% | Sep 18, 2024 |
30Monitor | CVE-2024-31170No exploit | Out-of-bounds Read in libfluid_msg libraryopennetworking · libfluid msg · CWE-125 | High7.5 | — | 0.4% | Sep 18, 2024 |
30Monitor | CVE-2024-31169No exploit | Out-of-bounds Read in libfluid_msg libraryopennetworking · libfluid msg · CWE-125 | High7.5 | — | 0.4% | Sep 18, 2024 |
30Monitor | CVE-2024-31173No exploit | Out-of-bounds Read in libfluid_msg libraryopennetworking · libfluid msg · CWE-125 | High7.5 | — | 0.4% | Sep 18, 2024 |
30Monitor | CVE-2024-31168No exploit | Out-of-bounds Read in libfluid_msg libraryopennetworking · libfluid msg · CWE-125 | High7.5 | — | 0.4% | Sep 18, 2024 |
- CVE-2018-100015539Monitor
OpenFlow version 1.0 onwards contains a Denial of Service and Improper authorization vulnerability in OpenFlow handshake: The DPID (DataPath
CriticalCVSS 9.8No exploitEPSS 1%opennetworking · openflowMay 24, 2018
- CVE-2022-2960439Monitor
An issue was discovered in ONOS 2.5.1.
CriticalCVSS 9.8No exploitEPSS 1%opennetworking · onosApr 20, 2023
- CVE-2022-2960639Monitor
An issue was discovered in ONOS 2.5.1.
CriticalCVSS 9.8No exploitEPSS 0%opennetworking · onosApr 20, 2023
- CVE-2025-2931039Monitor
An issue in onos v2.7.0 allows attackers to trigger a packet deserialization problem when supplying a crafted LLDP packet.
CriticalCVSS 9.8No exploitEPSS 0%opennetworking · onosMar 24, 2025
- CVE-2023-4159139Monitor
An issue in Open Network Foundation ONOS v2.7.0 allows attackers to create fake IP/MAC addresses and potentially execute a man-in-the-middle
CriticalCVSS 9.8No exploitEPSS 0%opennetworking · onosMay 29, 2025
- CVE-2025-2931236Monitor
An issue in onos v2.7.0 allows attackers to trigger unexpected behavior within a device connected to a legacy switch via changing the link t
CriticalCVSS 9.1No exploitEPSS 0%opennetworking · onosMar 24, 2025
- CVE-2019-1118930Monitor
Authentication Bypass by Spoofing in org.onosproject.acl (access control) and org.onosproject.mobility (host mobility) in ONOS v2.0 and earl
HighCVSS 7.5No exploitEPSS 1%opennetworking · onosFeb 20, 2020
- CVE-2022-2960830Monitor
An issue was discovered in ONOS 2.5.1.
HighCVSS 7.5No exploitEPSS 0%opennetworking · onosApr 20, 2023
- CVE-2022-2403530Monitor
An issue was discovered in ONOS 2.5.1.
HighCVSS 7.5No exploitEPSS 0%opennetworking · onosApr 20, 2023
- CVE-2022-2960730Monitor
An issue was discovered in ONOS 2.5.1.
HighCVSS 7.5No exploitEPSS 0%opennetworking · onosApr 20, 2023
- CVE-2021-3836330Monitor
An issue was discovered in ONOS 2.5.1.
HighCVSS 7.5No exploitEPSS 0%opennetworking · onosApr 20, 2023
- CVE-2022-2960530Monitor
An issue was discovered in ONOS 2.5.1.
HighCVSS 7.5No exploitEPSS 0%opennetworking · onosApr 20, 2023
- CVE-2024-4880930Monitor
An issue in Open Networking Foundations sdran-in-a-box v.1.4.3 and onos-a1t v.0.2.3 allows a remote attacker to cause a denial of service vi
HighCVSS 7.5No exploitEPSS 0%opennetworking · onos-a1tNov 4, 2024
- CVE-2024-3117530Monitor
NULL Pointer Dereference in libfluid_msg library
HighCVSS 7.5No exploitEPSS 0%opennetworking · libfluid msgSep 18, 2024
- CVE-2024-3116730Monitor
NULL Pointer Dereference in libfluid_msg library
HighCVSS 7.5No exploitEPSS 0%opennetworking · libfluid msgSep 18, 2024
- CVE-2024-3116530Monitor
NULL Pointer Dereference in libfluid_msg library
HighCVSS 7.5No exploitEPSS 0%opennetworking · libfluid msgSep 18, 2024
- CVE-2024-3116430Monitor
NULL Pointer Dereference in libfluid_msg library
HighCVSS 7.5No exploitEPSS 0%opennetworking · libfluid msgSep 18, 2024
- CVE-2024-2391630Monitor
NULL Pointer Dereference in libfluid_msg library
HighCVSS 7.5No exploitEPSS 0%opennetworking · libfluid msgSep 18, 2024
- CVE-2024-2391530Monitor
NULL Pointer Dereference in libfluid_msg library
HighCVSS 7.5No exploitEPSS 0%opennetworking · libfluid msgSep 18, 2024
- CVE-2024-3117130Monitor
Out-of-bounds Read in libfluid_msg library
HighCVSS 7.5No exploitEPSS 0%opennetworking · libfluid msgSep 18, 2024
- CVE-2024-3117230Monitor
Out-of-bounds Read in libfluid_msg library
HighCVSS 7.5No exploitEPSS 0%opennetworking · libfluid msgSep 18, 2024
- CVE-2024-3117030Monitor
Out-of-bounds Read in libfluid_msg library
HighCVSS 7.5No exploitEPSS 0%opennetworking · libfluid msgSep 18, 2024
- CVE-2024-3116930Monitor
Out-of-bounds Read in libfluid_msg library
HighCVSS 7.5No exploitEPSS 0%opennetworking · libfluid msgSep 18, 2024
- CVE-2024-3117330Monitor
Out-of-bounds Read in libfluid_msg library
HighCVSS 7.5No exploitEPSS 0%opennetworking · libfluid msgSep 18, 2024
- CVE-2024-3116830Monitor
Out-of-bounds Read in libfluid_msg library
HighCVSS 7.5No exploitEPSS 0%opennetworking · libfluid msgSep 18, 2024