What’s Vulnerable › Vulnerabilities

CVE-2022-29605

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2023-04-20 · updated 2026-06-17
• Weakness: CWE-670

Description

An issue was discovered in ONOS 2.5.1. IntentManager attempts to install the IPv6 flow rules of an intent into an OpenFlow 1.0 switch that does not support IPv6. Improper handling of the difference in capabilities of the intent and switch is misleading to a network operator.

Affected products

• Opennetworking Onos: 2.5.1

References

• https://wiki.onosproject.org/display/ONOS/Intent+Framework
• https://www.usenix.org/system/files/sec23fall-prepub-285_kim-jiwon.pdf
• https://wiki.onosproject.org/display/ONOS/Intent+Framework
• https://www.usenix.org/system/files/sec23fall-prepub-285_kim-jiwon.pdf

Get alerted when CVE-2022-29605 or the next vulnerability affects your stack