CVE-2015-1612

High

Published: 04/04/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

The OpenFlow plugin for OpenDaylight before Helium SR3 allows remote attackers to spoof the SDN topology, affecting the flow of data. This issue is related to the reuse of LLDP packets, known as 'LLDP Relay.'

Risk Assessment

Attackers can manipulate the network topology, leading to unauthorized access to data and disruption of system operations. This may result in serious security implications for the network.

Recommendation

It is recommended to upgrade to the latest version of OpenDaylight to mitigate this vulnerability. Additionally, monitoring network traffic for unauthorized changes in topology can help secure the system.

Other vulnerabilities in OpenFlow plugin for OpenDaylight

CVE-2015-1611High
OpenFlow plugin for OpenDaylight before Helium SR3 allows remote attackers to spoof the SDN topology and affect the flow of data, related to 'fake LLDP injection.'

Original NVD description (English source)

OpenFlow plugin for OpenDaylight before Helium SR3 allows remote attackers to spoof the SDN topology and affect the flow of data, related to the reuse of LLDP packets, aka "LLDP Relay."