CVE-2019-1010252: linuxfoundation open_network_operating_system Improper Input Validation
Vulnerability summary
CVE-2019-1010252 is a medium (CVSS 5.5) Improper Input Validation vulnerability in linuxfoundation open_network_operating_system. EPSS estimates a 1.06% chance of exploitation in the next 30 days, higher than 63.9% of scored vulnerabilities. 2 public exploits are recorded.
Timeline
- 18-07-2019PublishedVulnerability first disclosed.
- 05-08-2024Last modifiedVulnerability information updated.
Description
The Linux Foundation ONOS 2.0.0 and earlier is affected by: Poor Input-validation. The impact is: A network administrator (or attacker) can install unintended flow rules in the switch by mistake. The component is: applyFlowRules() and apply() functions in FlowRuleManager.java. The attack vector is: network management and connectivity.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
1.06%
Chance of exploitation in the next 30 days
Percentile
64%
Versus all other CVEs
30-day change
0.00 pp
From 1.06% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
2 foundExploit Reference (drive.google.com)
Maturity: unknown
Exploit Reference (drive.google.com)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Linuxfoundation1 product
The linux foundation1 product
- onos2.0.0 and earlier
2 vendors · 2 products
References
2 links- drive.google.com/open?id=1HtdRdf88Nv3RNeQJM9fQ6egY5X-tuewDX Refsource MISCExploitThird Party Advisory
- drive.google.com/open?id=1ce1uqcJYI-sEENGbPmmw-uJTwCXTUyJnX Refsource MISCExploitThird Party Advisory