CVE-2023-41591 Other in n/a

Critical 9.8 Published 29 May 2025 Updated 29 May 2025

Attackers can spoof IP and MAC addresses in ONOS to perform man-in-the-middle attacks on host communications.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2023-41591?

CVE-2023-41591 is a critical vulnerability in n/a, published on 29 May 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

An issue in Open Network Foundation ONOS v2.7.0 allows attackers to create fake IP/MAC addresses and potentially execute a man-in-the-middle attack on communications between fake and real hosts.

Weakness: CWE-290

Which versions are affected by CVE-2023-41591?

It affects 1 product.

Products include Opennetworking Onos.

How do I fix CVE-2023-41591?

No fix has been published for CVE-2023-41591 yet. Limit exposure of the affected software until one is available.

Is CVE-2023-41591 being exploited?

There is no known exploitation of CVE-2023-41591 in the wild and no public exploit code.

Sources

Also known as GHSA-cccf-vfhh-2vvp.