PT-2024-14714 · Open Networking Foundation · Onos
CVE-2023-52725
·
Published
2024-04-29
·
Updated
2025-07-14
CVSS v3.1
6.5
Medium
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L |
Name of the Vulnerable Software and Affected Versions
Open Networking Foundation SD-RAN ONOS onos-kpimon version 0.4.7
Description
The issue allows blocking of the
errCh channel within the Start function of the monitoring package.Recommendations
For version 0.4.7, consider disabling the
Start function of the monitoring package as a temporary workaround until a patch is available. Restrict access to the errCh channel to minimize the risk of exploitation.Exploit
Fix
Memory Corruption
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Onos