CVE-2025-29311

Limited secret space in LLDP packets used in onos v2.7.0 allows attackers to obtain the private key via a bruteforce attack. Attackers are able to leverage this vulnerability into creating crafted LLDP packets.

Weakness

The product uses an algorithm or scheme that produces insufficient entropy, leaving patterns or clusters of values that are more likely to occur than others.

Potential Mitigations

Related Attack Patterns

• https://cwe.mitre.org/data/definitions/59.html

References

• https://gist.github.com/Saber-Berserker/790f2a75ae482df3fd0fce569f30504a;