PT-2019-7012 · Open Floodlight · Open Floodlight Sdn Controller

Published 2019-10-23 · Updated 2019-10-25 · CVE-2013-7333

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Open Floodlight SDN controller software version 0.90

Description A vulnerability in the Open Floodlight SDN controller software could allow an attacker with access to the OpenFlow control network to selectively disconnect individual switches from the SDN controller, causing degradation and eventually denial of network access to all devices connected to the targeted switch.

Recommendations For version 0.90, consider restricting access to the OpenFlow control network to minimize the risk of exploitation. As a temporary workaround, consider implementing additional security measures to prevent unauthorized access to the SDN controller. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2013-7333

Affected Products

Open Floodlight Sdn Controller

References · 3

• 🔥 http://dovernetworks.com/wp-content/uploads/2013/12/OpenFloodlight-12302013.pdf · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2013-7333 · Security Note
• https://t.me/cibsecurity/7609 · Telegram Post