Opendaylight CVE-2024-46942

MEDIUM

Improper Authorization (CWE-285)

2024-09-15 cve@mitre.org

Authentication Bypass Opendaylight Model Driven Service Abstraction Layer

6.5

CVSS 3.1 · NVD

Share

Severity by source

NVD PRIMARY

6.5 MEDIUM

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

High

Availability

None

Lifecycle Timeline

1

CVE Published

Sep 15, 2024 - 23:15 nvd

MEDIUM 6.5

DescriptionNVD

In OpenDaylight Model-Driven Service Abstraction Layer (MD-SAL) through 13.0.1, a controller with a follower role can configure flow entries in an OpenDaylight clustering deployment.

AnalysisAI

In OpenDaylight Model-Driven Service Abstraction Layer (MD-SAL) through 13.0.1, a controller with a follower role can configure flow entries in an OpenDaylight clustering deployment. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-285. In OpenDaylight Model-Driven Service Abstraction Layer (MD-SAL) through 13.0.1, a controller with a follower role can configure flow entries in an OpenDaylight clustering deployment. Affected products include: Opendaylight Model-Driven Service Abstraction Layer. Version information: through 13.0.1.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Opendaylight

View all

CVE-2018-1132 CRITICAL Act Now POC

A flaw was found in Opendaylight's SDNInterfaceapp (SDNI). Rated critical severity (CVSS 9.8), this vulnerability is rem

CVE-2017-1000361 HIGH This Week POC

DOMRpcImplementationNotAvailableException when sending Port-Status packets to OpenDaylight. Rated high severity (CVSS 7.

CVE-2017-1000357 HIGH This Week POC

Denial of Service attack when the switch rejects to receive packets from the controller. Rated high severity (CVSS 7.5),

CVE-2022-45932 HIGH This Week POC

A SQL injection issue was discovered in AAA in OpenDaylight (ODL) before 0.16.5. Rated high severity (CVSS 7.5), this vu

CVE-2022-45930 HIGH This Week POC

A SQL injection issue was discovered in AAA in OpenDaylight (ODL) before 0.16.5. Rated high severity (CVSS 7.5), this vu

CVE-2017-1000358 MEDIUM This Month POC

Controller throws an exception and does not allow user to add subsequent flow for a particular switch. Rated medium seve

CVE-2015-1778 CRITICAL Act Now

The custom authentication realm used by karaf-tomcat's "opendaylight" realm in Opendaylight before Helium SR3 will authe

CVE-2018-1078 CRITICAL Act Now

OpenDayLight version Carbon SR3 and earlier contain a vulnerability during node reconciliation that can result in traffi

CVE-2017-1000359 MEDIUM This Month POC

Java out of memory error and significant increase in resource consumption. Rated medium severity (CVSS 5.3), this vulner

CVE-2017-1000360 MEDIUM This Month POC

StreamCorruptedException and NullPointerException in OpenDaylight odl-mdsal-xsql. Rated medium severity (CVSS 5.3), this

CVE-2014-8149 HIGH This Week

OpenDaylight defense4all 1.1.0 and earlier allows remote authenticated users to write report data to arbitrary files. Ra

CVE-2015-1612 HIGH This Week

OpenFlow plugin for OpenDaylight before Helium SR3 allows remote attackers to spoof the SDN topology and affect the flow

Same weakness CWE-285 – Improper Authorization

View all

CVE-2025-29927 CRITICAL POC

CVE-2016-5676 HIGH POC

CVE-2025-66301 CRITICAL POC

CVE-2023-32707 HIGH POC

CVE-2016-3352 HIGH

CVE-2025-29659 CRITICAL POC

CVE-2022-2595 CRITICAL POC

CVE-2026-55166 CRITICAL POC

Same technique Authentication Bypass

View all

CVE-2023-22515 CRITICAL POC

CVE-2012-4681 CRITICAL POC

CVE-2013-2465 CRITICAL POC

CVE-2011-3544 CRITICAL POC

CVE-2022-40684 CRITICAL POC

CVE-2025-61882 CRITICAL POC

CVE-2024-0012 CRITICAL POC

CVE-2023-46805 HIGH POC

Share

CVE-2024-46942 vulnerability details – vuln.today

Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy