GCVE - cpe:2.3:a:opennetworking:onos:2.7.0:-:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:opennetworking:onos:2.7.0:-:*:*:*:*:*:*

part: a version: 2.7.0 update: -

Vendor	Opennetworking (`ea2640ac-31ee-56d5-b3e0-243382a712d3`)
Product	Onos (`a4092432-e4da-5a50-983d-16abbe8266ce`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/opennetworkinglab/onos`	purl2cpe	2026-06-01 10:16:44.119884

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-29312`	vulnerable	2026-06-08 07:14:56.402742	Details available An issue in onos v2.7.0 allows attackers to trigger unexpected behavior within a device connected to a legacy switch via changing the link type from indirect to direct. Published: 2025-03-24T00:00:00.000Z Updated: 2025-03-26T14:25:27.541Z Open on db.gcve.eu Reference links https://gist.github.com/Saber-Berserker/4e54c2aa70abab2b133ce2c2b7e91249	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-29311`	vulnerable	2026-06-08 07:14:56.402488	Details available Limited secret space in LLDP packets used in onos v2.7.0 allows attackers to obtain the private key via a bruteforce attack. Attackers are able to leverage this vulnerability into creating crafted LLDP packets. Published: 2025-03-24T00:00:00.000Z Updated: 2025-03-26T14:37:01.507Z Open on db.gcve.eu Reference links https://gist.github.com/Saber-Berserker/790f2a75ae482df3fd0fce569f30504a;	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-29310`	vulnerable	2026-06-08 07:14:56.402168	Details available An issue in onos v2.7.0 allows attackers to trigger a packet deserialization problem when supplying a crafted LLDP packet. This vulnerability allows attackers to execute arbitrary commands or access network information. Published: 2025-03-24T00:00:00.000Z Updated: 2025-03-26T14:38:01.406Z Open on db.gcve.eu Reference links https://gist.github.com/Saber-Berserker/10c9d548b38fa988310d90b8314e3129.	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-53423`	vulnerable	2026-06-08 06:54:15.012832	Details available An issue in Open Network Foundation ONOS v2.7.0 allows attackers to cause a Denial of Service (DoS) via supplying crafted packets. Published: 2025-05-29T00:00:00.000Z Updated: 2025-05-29T18:28:53.386Z Open on db.gcve.eu Reference links https://wiki.onosproject.org/pages/viewpage.action?pageId=16122675 https://gist.github.com/kjw6855/abeecc798d138b49537393e1fd3a5e96	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-41591`	vulnerable	2026-06-08 06:11:06.214657	Details available An issue in Open Network Foundation ONOS v2.7.0 allows attackers to create fake IP/MAC addresses and potentially execute a man-in-the-middle attack on communications between fake and real hosts. Published: 2025-05-29T00:00:00.000Z Updated: 2025-05-29T18:21:05.597Z Open on db.gcve.eu Reference links https://wiki.onosproject.org/pages/viewpage.action?pageId=16122675 https://gist.github.com/kjw6855/9764e3f51b89119473e4d2c4f64dca27	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.