What is CVE-2022-29609?

CVE-2022-29609 is a medium-severity vulnerability in Opennetworking Onos, classified under Always-Incorrect Control Flow Implementation. CVSS score: 5.3/10. Published 2023-04-20.

How severe is CVE-2022-29609?

Medium severity. CVSS v3 base score is 5.3 out of 10.

Is CVE-2022-29609 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Opennetworking Onos

CVE-2022-29609

An issue was discovered in ONOS 2.5.1. An intent with the same source and destination shows the INSTALLING state, indicating that its flow rules are installing. Improper handling of such an intent is misleading to a network operator.

EPSS: 0.006 (42.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N.

Affected products

Opennetworking Onos — versions 2.5.1
N/a — versions n/a

Weakness classification (CWE)

CWE-670 — Always-Incorrect Control Flow Implementation

Public proof-of-concept exploits

karimhabush/cyberowl

References

cve@mitre.org (Product)
cve@mitre.org (Technical Description, Exploit, Third Party Advisory)

Frequently asked questions

What is CVE-2022-29609?: CVE-2022-29609 is a medium-severity vulnerability in Opennetworking Onos, classified under Always-Incorrect Control Flow Implementation. CVSS score: 5.3/10. Published 2023-04-20.
How severe is CVE-2022-29609?: Medium severity. CVSS v3 base score is 5.3 out of 10.
Is CVE-2022-29609 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.