CVE-2019-11189 - CVE House
Back to Database
Status published High CVE-2019-11189

Authentication Bypass by Spoofing in org.onosproject.acl (access control) and org.onosproject.mobility...

Vulnerability Description

Authentication Bypass by Spoofing in org.onosproject.acl (access control) and org.onosproject.mobility (host mobility) in ONOS v2.0 and earlier allows attackers to bypass network access control via data plane packet injection. To exploit the vulnerability, an attacker sends a gratuitous ARP reply that causes the host mobility application to remove existing access control flow denial rules in the network. The access control application does not re-install flow deny rules, so the attacker can bypass the intended access control policy.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-11189

Credits & Attribution

No credits recorded in the NVD database.

References

More from opennetworking

View All →
CVE-2022-29944
An issue was discovered in ONOS 2.5.1. There is an...
Unknown 0
CVE-2022-29609
An issue was discovered in ONOS 2.5.1. An intent with...
Unknown 0
CVE-2022-29608
An issue was discovered in ONOS 2.5.1. An intent with...
Unknown 0
CVE-2022-29607
An issue was discovered in ONOS 2.5.1. Modification of an...
Unknown 0
CVE-2022-29606
An issue was discovered in ONOS 2.5.1. An intent with...
Unknown 0

Affected Vendor

opennetworking

View all reports →

Affected Software

onos
Vulnerable Versions:
0

Timeline

Official Publish: February 20th, 2020
Last Modified: August 4th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.