CVE-2025-29312

CVSS 3.1 Score 9.1 of 10 (high)

Details

Published Mar 24, 2025
Updated: Apr 1, 2025
CWE ID 670

Summary

CVE-2025-29312 is a newly disclosed vulnerability affecting onos v2.7.0. This issue permits attackers to manipulate the link type setting between devices connected to a legacy switch. By changing the link type from indirect to direct, attackers can trigger unexpected behavior within the targeted device. This vulnerability poses a potential risk for network disruptions and could be exploited for unintended actions. Network administrators are advised to update their onos installations to the latest version to mitigate this threat.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share