What’s Vulnerable › Vulnerabilities

CVE-2024-51406

• Severity: medium (CVSS 6.2 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2024-11-01 · updated 2026-06-17
• Weakness: CWE-290

Description

Floodlight SDN Open Flow Controller v.1.2 has an issue that allows local hosts to build fake LLDP packets that allow specific clusters to be missed by Floodlight, which in turn leads to missed hosts inside and outside the cluster.

Affected products

• projectfloodlight Open Sdn Controller: 1.2

References

• https://github.com/floodlight/floodlight
• https://github.com/floodlight/floodlight/issues/870
• https://ieeexplore.ieee.org/document/10246976

Get alerted when CVE-2024-51406 or the next vulnerability affects your stack