Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
ONOS ONOS Controller version 1.13.1 and earlier contains a XML External Entity (XXE) vulnerability in providers/netconf/alarm/src/main/java/org/onosproject/provider/netconf/alarm/NetconfAlarmTranslator.java that can result in An adversary can remotely launch advanced XXE attacks on ONOS controller without authentication.. This attack appear to be exploitable via crafted protocol message.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
ONOS Controller 安全漏洞
Vulnerability Description
ONOS是一套开源的SDN网络操作系统。Controller是其中的一个控制器。 ONOS Controller 1.13.1及之前版本中的providers/netconf/alarm/src/main/java/org/onosproject/provider/netconf/alarm/NetconfAlarmTranslator.java文件存在XML外部实体注入漏洞。远程攻击者可借助特制的协议消息利用该漏洞泄露ONOS控制器上的文件或执行更高级的XML外部实体注入攻击。
CVSS Information
N/A
Vulnerability Type
N/A