Opendaylight CVE-2015-1610

MEDIUM

Permissions, Privileges, and Access Controls (CWE-264)

2017-03-20 cve@mitre.org

Privilege Escalation Opendaylight L2Switch

5.3

CVSS 3.0 · NVD

Share

Severity by source

NVD PRIMARY

5.3 MEDIUM

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

Low

Availability

None

Lifecycle Timeline

1

CVE Published

Mar 20, 2017 - 16:59 cve.org

MEDIUM 5.3

DescriptionCVE.org

hosttracker in OpenDaylight l2switch allows remote attackers to change the host location information by spoofing the MAC address, aka "topology spoofing."

AnalysisAI

hosttracker in OpenDaylight l2switch allows remote attackers to change the host location information by spoofing the MAC address, aka "topology spoofing.". Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-264. hosttracker in OpenDaylight l2switch allows remote attackers to change the host location information by spoofing the MAC address, aka "topology spoofing." Affected products include: Opendaylight L2Switch.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Opendaylight

View all

CVE-2018-1132 CRITICAL Act Now POC

A flaw was found in Opendaylight's SDNInterfaceapp (SDNI). Rated critical severity (CVSS 9.8), this vulnerability is rem

CVE-2017-1000361 HIGH This Week POC

DOMRpcImplementationNotAvailableException when sending Port-Status packets to OpenDaylight. Rated high severity (CVSS 7.

CVE-2017-1000357 HIGH This Week POC

Denial of Service attack when the switch rejects to receive packets from the controller. Rated high severity (CVSS 7.5),

CVE-2022-45932 HIGH This Week POC

A SQL injection issue was discovered in AAA in OpenDaylight (ODL) before 0.16.5. Rated high severity (CVSS 7.5), this vu

CVE-2022-45930 HIGH This Week POC

A SQL injection issue was discovered in AAA in OpenDaylight (ODL) before 0.16.5. Rated high severity (CVSS 7.5), this vu

CVE-2017-1000358 MEDIUM This Month POC

Controller throws an exception and does not allow user to add subsequent flow for a particular switch. Rated medium seve

CVE-2015-1778 CRITICAL Act Now

The custom authentication realm used by karaf-tomcat's "opendaylight" realm in Opendaylight before Helium SR3 will authe

CVE-2018-1078 CRITICAL Act Now

OpenDayLight version Carbon SR3 and earlier contain a vulnerability during node reconciliation that can result in traffi

CVE-2017-1000359 MEDIUM This Month POC

Java out of memory error and significant increase in resource consumption. Rated medium severity (CVSS 5.3), this vulner

CVE-2017-1000360 MEDIUM This Month POC

StreamCorruptedException and NullPointerException in OpenDaylight odl-mdsal-xsql. Rated medium severity (CVSS 5.3), this

CVE-2014-8149 HIGH This Week

OpenDaylight defense4all 1.1.0 and earlier allows remote authenticated users to write report data to arbitrary files. Ra

CVE-2015-1612 HIGH This Week

OpenFlow plugin for OpenDaylight before Helium SR3 allows remote attackers to spoof the SDN topology and affect the flow

Same weakness CWE-264 – Permissions, Privileges, and Access Controls

View all

CVE-2013-0422 CRITICAL POC

CVE-2016-10372 CRITICAL POC

CVE-2014-9583 CRITICAL POC

CVE-2012-0297 CRITICAL POC

CVE-2015-7709 CRITICAL POC

CVE-2014-0514 CRITICAL POC

CVE-2013-6955 CRITICAL POC

CVE-2012-0299 CRITICAL POC

Same technique Privilege Escalation

View all

CVE-2024-0012 CRITICAL POC

CVE-2025-47812 CRITICAL POC

CVE-2013-0422 CRITICAL POC

CVE-2013-0632 CRITICAL POC

CVE-2024-9474 MEDIUM POC

CVE-2017-5689 CRITICAL POC

CVE-2021-20021 CRITICAL POC

CVE-2017-12635 CRITICAL POC

Share

CVE-2015-1610 vulnerability details – vuln.today

Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy