PT-2024-14714 · Open Networking Foundation · Onos

Published 2024-04-29 · Updated 2025-07-14 · CVE-2023-52725

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

Name of the Vulnerable Software and Affected Versions Open Networking Foundation SD-RAN ONOS onos-kpimon version 0.4.7

Description The issue allows blocking of the errCh channel within the Start function of the monitoring package.

Recommendations For version 0.4.7, consider disabling the Start function of the monitoring package as a temporary workaround until a patch is available. Restrict access to the errCh channel to minimize the risk of exploitation.

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2023-52725

Affected Products

Onos

References · 6

• https://github.com/onosproject/onos-kpimon/pull/120 · Patch
• https://osv.dev/vulnerability/CVE-2023-52725 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-52725 · Security Note
• https://t.me/cvenotify/78491 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1785184375572681057 · Twitter Post
• https://t.me/cvenotify/128893 · Telegram Post