PT-2025-5861 · Unknown · Floodlight

Saber-Berserker · Published 2025-02-06 · Updated 2025-04-23 · CVE-2024-57672

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Floodlight version 1.2

Description An issue in Floodlight allows a local attacker to cause a denial of service via the Topology Manager module, the Topologylnstance module, and the Routing module.

Recommendations For Floodlight version 1.2, consider disabling the Topology Manager module, the Topologylnstance module, and the Routing module as a temporary workaround to minimize the risk of exploitation. Restrict access to these modules to prevent a local attacker from causing a denial of service.

Fix

DoS

Resource Exhaustion

Allocation of Resources Without Limits

Weakness Enumeration

CWE-400

CWE-770

Related Identifiers

CVE-2024-57672

Affected Products

Floodlight

References · 7

• https://osv.dev/vulnerability/CVE-2024-57672 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-57672 · Security Note
• https://github.com/floodlight/floodlight/issues/871 · Note
• https://t.me/cvedetector/17417 · Telegram Post
• https://twitter.com/CVETracker/status/1887954679251837097 · Twitter Post
• https://t.me/cvenotify/119604 · Telegram Post
• https://twitter.com/CVEnew/status/1887586284593680583 · Twitter Post