Skip to main content

Opendaylight CVE-2015-1612

HIGH
Improper Input Validation (CWE-20)
2017-04-04 cve@mitre.org
Information Disclosure Opendaylight Openflow
7.5
CVSS 3.0 · NVD
Share

Severity by source

NVD PRIMARY
7.5 HIGH
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
High
Availability
None

Lifecycle Timeline

1
CVE Published
Apr 04, 2017 - 17:59 cve.org
HIGH 7.5

Blast Radius

ecosystem impact
† from your stack dependencies † transitive graph · vuln.today resolves 4-path depth
  • 27 maven packages depend on org.opendaylight.openflowplugin:openflowplugin (7 direct, 20 indirect)

Ecosystem-wide dependent count for version 0.0.6-Helium-SR3.

DescriptionCVE.org

OpenFlow plugin for OpenDaylight before Helium SR3 allows remote attackers to spoof the SDN topology and affect the flow of data, related to the reuse of LLDP packets, aka "LLDP Relay."

AnalysisAI

OpenFlow plugin for OpenDaylight before Helium SR3 allows remote attackers to spoof the SDN topology and affect the flow of data, related to the reuse of LLDP packets, aka "LLDP Relay.". Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Technical ContextAI

This vulnerability is classified under CWE-20. OpenFlow plugin for OpenDaylight before Helium SR3 allows remote attackers to spoof the SDN topology and affect the flow of data, related to the reuse of LLDP packets, aka "LLDP Relay." Affected products include: Opendaylight Openflow.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Opendaylight

View all
CVE-2018-1132 CRITICAL POC
9.8 Jun 20

A flaw was found in Opendaylight's SDNInterfaceapp (SDNI). Rated critical severity (CVSS 9.8), this vulnerability is rem
CVE-2017-1000361 HIGH POC
7.5 Apr 24

DOMRpcImplementationNotAvailableException when sending Port-Status packets to OpenDaylight. Rated high severity (CVSS 7.
CVE-2017-1000357 HIGH POC
7.5 Apr 24

Denial of Service attack when the switch rejects to receive packets from the controller. Rated high severity (CVSS 7.5),
CVE-2022-45932 HIGH POC
7.5 Nov 27

A SQL injection issue was discovered in AAA in OpenDaylight (ODL) before 0.16.5. Rated high severity (CVSS 7.5), this vu
CVE-2022-45930 HIGH POC
7.5 Nov 27

A SQL injection issue was discovered in AAA in OpenDaylight (ODL) before 0.16.5. Rated high severity (CVSS 7.5), this vu
CVE-2017-1000358 MEDIUM POC
6.5 Apr 24

Controller throws an exception and does not allow user to add subsequent flow for a particular switch. Rated medium seve
CVE-2015-1778 CRITICAL
9.8 Jun 27

The custom authentication realm used by karaf-tomcat's "opendaylight" realm in Opendaylight before Helium SR3 will authe
CVE-2018-1078 CRITICAL
9.8 Mar 16

OpenDayLight version Carbon SR3 and earlier contain a vulnerability during node reconciliation that can result in traffi
CVE-2017-1000359 MEDIUM POC
5.3 Apr 24

Java out of memory error and significant increase in resource consumption. Rated medium severity (CVSS 5.3), this vulner
CVE-2017-1000360 MEDIUM POC
5.3 Apr 24

StreamCorruptedException and NullPointerException in OpenDaylight odl-mdsal-xsql. Rated medium severity (CVSS 5.3), this
CVE-2014-8149 HIGH
8.8 Jun 27

OpenDaylight defense4all 1.1.0 and earlier allows remote authenticated users to write report data to arbitrary files. Ra
CVE-2015-1611 HIGH
7.5 Apr 04

OpenFlow plugin for OpenDaylight before Helium SR3 allows remote attackers to spoof the SDN topology and affect the flow

Same weakness CWE-20 – Improper Input Validation

View all
CVE-2021-44228 CRITICAL POC
10.0
CVE-2024-3400 CRITICAL POC
10.0
CVE-2022-47966 CRITICAL POC
9.8
CVE-2023-22515 CRITICAL POC
9.8
CVE-2009-0927 HIGH POC
8.8
CVE-2017-9791 CRITICAL POC
9.8
CVE-2017-15944 CRITICAL POC
9.8
CVE-2019-0604 CRITICAL POC
9.8

Same technique Information Disclosure

View all
CVE-2019-2725 CRITICAL POC
9.8
CVE-2021-34523 CRITICAL POC
9.0
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8

Share

CVE-2015-1612 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy