VulnerabilityModified
CVE-2019-16300
In combination with other applications, this could lead to the absence of intended code execution.
HIGH 7.5EPSS 2.00%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (2.00%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
An issue was discovered in Open Network Operating System (ONOS) 1.14. In the access control application (org.onosproject.acl), the host event listener does not handle the following event types: HOST_REMOVED. In combination with other applications, this could lead to the absence of intended code execution.
- CVSS 3.1
- 7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- EPSS
- 2.00% probability · 80th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-755
- Affected
- linuxfoundation/open network operating system
- Source
- cve@mitre.org
References
- https://www.ndss-symposium.org/wp-content/uploads/2020/02/24080.pdfTechnical Description, Third Party Advisory
- https://www.ndss-symposium.org/wp-content/uploads/2020/02/24080.pdfTechnical Description, Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.