CVE-2025-29310
CVSS 3.1 Score 9.8 of 10 (high)
Details
Published Mar 24, 2025
Updated: Apr 1, 2025
CWE ID 502
Summary
CVE-2025-29310 is a vulnerability affecting onos v2.7.0. It permits attackers to exploit a packet deserialization issue using crafted LLDP packets. Successful exploitation of this vulnerability can result in arbitrary command execution or unauthorized access to network information. This poses a significant security risk, particularly in network environments where data confidentiality and integrity are crucial. Organizations using onos v2.7.0 are advised to update to a patched version as soon as possible to mitigate this vulnerability.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- Open Networking