CVE-2021-38364

PoC —

CVSS 3.1

6.5 medium

EPSS

<1%p56

Published

Apr 20, 2023 (Apr 20, 2023)

Modified

Jun 17, 2026

Description

An issue was discovered in ONOS 2.5.1. There is an incorrect comparison of flow rules installed by intents. A remote attacker can install or remove a new intent, and consequently modify or delete the existing flow rules related to other intents.

Vendors: opennetworking
Products: onos
Weakness: CWE-697
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

NVD CVE.org GitHub PoCs EPSS (0.8%)

In the news0 stories

No ingested article mentions this CVE yet.