CVE-2024-48809

An issue in Open Networking Foundations sdran-in-a-box v.1.4.3 and onos-a1t v.0.2.3 allows a remote attacker to cause a denial of service via the onos-a1t component of the sdran-in-a-box, specifically the DeleteWatcher function.

Score

CVSS 3.1 7.5 High

Status

Analyzed - cve@mitre.org

Published

2024-11-04

Last modified

2024-11-05

Weaknesses

CWE-770

Affected products

• Sdran-in-a-box (Onosproject)
• Onos-a1t (Opennetworking)
• Sdran-in-a-box (Opennetworking)

References

• https://gist.github.com/bergen876/5a21f78e266c12aa2586beb2178443b0
• https://github.com/onosproject/sdran-in-a-box/issues/206