CVE-2024-51406

Floodlight SDN Open Flow Controller v.1.2 has an issue that allows local hosts to build fake LLDP packets that allow specific clusters to be missed by Floodlight, which in turn leads to missed hosts inside and outside the cluster.

CVSS v3.1

6.2 MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.23% chance of exploitation in the next 30 days, 14th percentile

Published

2024-11-01

Updated

2024-11-04

Proof-of-concept exploits (1)

• floodlight/floodlight/issues/870

References

• CVE Record
• NVD entry

Related

• CVE-2024-29461
• CVE-2024-51407
• CVE-2024-57673
• CVE-2024-51382
• CVE-2024-51381
• CVE-2024-51409