CVE-2013-7333
Last modified
CVE-2013-7333 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. A vulnerability in version 0.90 of the Open Floodlight SDN controller software could allow an attacker with access to the OpenFlow control network to selectively disconnect individual switches from the SDN controller, causing degradation and eventually denial of network access to all devices connected to the targeted switch.. EPSS estimates a 1.12% chance of exploitation in the next 30 days.
Description
A vulnerability in version 0.90 of the Open Floodlight SDN controller software could allow an attacker with access to the OpenFlow control network to selectively disconnect individual switches from the SDN controller, causing degradation and eventually denial of network access to all devices connected to the targeted switch.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Projectfloodlight | Open Sdn Controller | 0.90 |
References
- http://dovernetworks.com/wp-content/uploads/2013/12/OpenFloodlight-12302013.pdfExploit, Third Party Advisory
- http://dovernetworks.com/wp-content/uploads/2013/12/OpenFloodlight-12302013.pdfExploit, Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2013-7333?
How severe is CVE-2013-7333?
How do I fix CVE-2013-7333?
Are you affected by CVE-2013-7333?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST