Moole Vulnerability Database

Find real vulnerabilities before they ship

High

CVE-2015-1612

OpenFlow plugin for OpenDaylight before Helium SR3 allows remote attackers to spoof the SDN topology and affect the flow of data, related to the reuse of LLDP packets, aka "LLDP Relay."

VectorNETWORK

PublishedApr 04, 2017, 17:59

Published Bycve@mitre.org

Base Score

Score7.5

Affected Versions

Package (Ecosystem)IntroducedFixedLimit

org.opendaylight.openflowplugin:openflowplugin(Maven)00.0.6-Helium-SR3N/A

References

http://www.internetsociety.org/sites/default/files/10_4_2.pdf
http://www.securityfocus.com/bid/73254
https://cloudrouter.org/security/
https://git.opendaylight.org/gerrit/#/c/16193/
https://git.opendaylight.org/gerrit/#/c/16208/
https://wiki.opendaylight.org/view/Security_Advisories#.5BModerate.5D_CVE-2015-1611_CVE-2015-1612_openflowplugin:_topology_spoofing_via_LLDP

Weakness Type

CWE-20

CVSS Metrics

Base Score

7.5

Vector String

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Base SeverityHigh

Version

3.0

Attack Vector (AV)

NETWORK