CVE-2025-29311

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-03-24 · updated 2026-06-17
Weakness: CWE-331

Description

Limited secret space in LLDP packets used in onos v2.7.0 allows attackers to obtain the private key via a bruteforce attack. Attackers are able to leverage this vulnerability into creating crafted LLDP packets.

Affected products

Opennetworking Onos: 2.7.0

References

https://gist.github.com/Saber-Berserker/790f2a75ae482df3fd0fce569f30504a;

Get alerted when CVE-2025-29311 or the next vulnerability affects your stack