CVE-2020-18685

Floodlight through 1.2 has poor input validation in checkFlow in StaticFlowEntryPusherResource.java because of unchecked prerequisites related to TCP or UDP ports, or group or table IDs.

CVSS v3.1 NVD

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0 NVD

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

1.29% chance of exploitation in the next 30 days, 70th percentile

Published

2021-09-30

Updated

2024-08-04

Proof-of-concept exploits (1)

• https://drive.google.com/open?id=1oIt6jViGxLALUkLVELsQpC26MJYFZt2U

References

• CVE Record
• NVD entry