CVE-2024-48809

HIGH

sdran-in-a-box 1.4.3 and onos-a1t 0.2.3 - Denial of Service via DeleteWatcher Function

Title source: llm

Description

An issue in Open Networking Foundations sdran-in-a-box v.1.4.3 and onos-a1t v.0.2.3 allows a remote attacker to cause a denial of service via the onos-a1t component of the sdran-in-a-box, specifically the DeleteWatcher function.

References (2)

Core 2

Core References

Third Party Advisory

https://gist.github.com/bergen876/5a21f78e266c12aa2586beb2178443b0

Exploit, Issue Tracking

https://github.com/onosproject/sdran-in-a-box/issues/206

Scores

CVSS v3 7.5

EPSS 0.0058

EPSS Percentile 43.0%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment

Exploitation poc

Automatable yes

Technical Impact partial

Details

CWE

CWE-770

Status published

Products (2)

opennetworking/onos-a1t 0.2.3

opennetworking/sdran-in-a-box 1.4.3

Published Nov 04, 2024

Tracked Since Feb 18, 2026