CVE-2017-1000081

Linux foundation ONOS 1.9.0 is vulnerable to unauthenticated upload of applications (.oar) resulting in remote code execution.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2017-07-17

Last modified

2024-08-05

Weaknesses

CWE-434

Affected products

• Onos (Onosproject)

References

• https://wiki.onosproject.org/display/ONOS/Security+advisories