CVE-2017-1000081

Critical

Published: 17/07/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

ONOS version 1.9.0 is vulnerable to unauthenticated upload of applications (.oar), leading to remote code execution.

Risk Assessment

Exploitation of this vulnerability could allow attackers to remotely execute arbitrary code on the server, posing a significant security risk.

Recommendation

It is recommended to upgrade ONOS to the latest version to mitigate this vulnerability and implement authorization mechanisms for application uploads.

Original NVD description (English source)

Linux foundation ONOS 1.9.0 is vulnerable to unauthenticated upload of applications (.oar) resulting in remote code execution.