What’s Vulnerable › Vulnerabilities

CVE-2024-46942

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-09-15 · updated 2026-06-17
• Weakness: CWE-285

Description

In OpenDaylight Model-Driven Service Abstraction Layer (MD-SAL) through 13.0.1, a controller with a follower role can configure flow entries in an OpenDaylight clustering deployment.

Affected products

• OpenDayLight Model-Driven Service Abstraction Layer: through 13.0.1

References

• https://docs.opendaylight.org/en/latest/release-notes/projects/mdsal.html
• https://doi.org/10.48550/arXiv.2408.16940
• https://lf-opendaylight.atlassian.net/browse/MDSAL-869

Get alerted when CVE-2024-46942 or the next vulnerability affects your stack