CVE-2022-29607

An issue was discovered in ONOS 2.5.1. Modification of an existing intent to have the same source and destination shows the INSTALLED state without any flow rule. Improper handling of such an intent is misleading to a network operator.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
mitreCNA
---
---
CVEADP
---
---
CISA-ADPADP
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 6%
VendorProductVersion
opennetworkingonos
2.5.1
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://wiki.onosproject.org/display/ONOS/Intent+Framework
https://www.usenix.org/system/files/sec23fall-prepub-285_kim-jiwon.pdf
https://wiki.onosproject.org/display/ONOS/Intent+Framework
https://www.usenix.org/system/files/sec23fall-prepub-285_kim-jiwon.pdf