CVE-2023-41591

NVD	https://nvd.nist.gov/vuln/detail/CVE-2023-41591
CWE	https://cwe.mitre.org/data/definitions/290.html

An issue in Open Network Foundation ONOS v2.7.0 allows attackers to create fake IP/MAC addresses and potentially execute a man-in-the-middle attack on communications between fake and real hosts.

Weakness

This attack-focused weakness is caused by incorrectly implemented authentication schemes that are subject to spoofing attacks.

https://cwe.mitre.org/data/definitions/21.html
https://cwe.mitre.org/data/definitions/22.html
https://cwe.mitre.org/data/definitions/459.html
https://cwe.mitre.org/data/definitions/461.html
https://cwe.mitre.org/data/definitions/473.html
https://cwe.mitre.org/data/definitions/476.html
https://cwe.mitre.org/data/definitions/59.html
https://cwe.mitre.org/data/definitions/60.html
https://cwe.mitre.org/data/definitions/667.html
https://cwe.mitre.org/data/definitions/94.html

References

https://gist.github.com/kjw6855/9764e3f51b89119473e4d2c4f64dca27
https://wiki.onosproject.org/pages/viewpage.action?pageId=16122675

Authentication Bypass by Spoofing

Weakness

Related Attack Patterns

References