Richard Skowyra

A time-of-check to time-of-use (TOCTOU) race condition exists in the access control application of ONOS, allowing attackers to bypass network access control. This can be achieved via data plane packet injection.