PT-2019-7012 · Open Floodlight · Open Floodlight Sdn Controller

Publicado 2019-10-23 · Atualizado 2019-10-25 · CVE-2013-7333

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Open Floodlight SDN controller software version 0.90

Description A vulnerability in the Open Floodlight SDN controller software could allow an attacker with access to the OpenFlow control network to selectively disconnect individual switches from the SDN controller, causing degradation and eventually denial of network access to all devices connected to the targeted switch.

Recommendations For version 0.90, consider restricting access to the OpenFlow control network to minimize the risk of exploitation. As a temporary workaround, consider implementing additional security measures to prevent unauthorized access to the SDN controller. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2013-7333

Produtos afetados

Open Floodlight Sdn Controller

Referências · 3

• 🔥 http://dovernetworks.com/wp-content/uploads/2013/12/OpenFloodlight-12302013.pdf · Exploit
• https://t.me/cibsecurity/7609 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2013-7333 · Nota de Segurança