high7.5
CVE-2025-29311
Limited secret space in LLDP packets used in onos v2.7.0 allows attackers to obtain the private key via a bruteforce attack.
Impact
Limited secret space in LLDP packets used in onos v2.7.0 allows attackers to obtain the private key via a bruteforce attack. Attackers are able to leverage this vulnerability into creating crafted LLDP packets.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Opennetworking | Onos | Version 2.7.0 |