VULNERABILITY INTELLIGENCE
CVE-2019-16298
CVSS score7.5 HIGH
EPSS probability1.67%
CISA KEVNot currently listed
Published2020-02-20
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Description
An issue was discovered in Open Network Operating System (ONOS) 1.14. In the virtual broadband network gateway application (org.onosproject.virtualbng), the host event listener does not handle the following event types: HOST_MOVED, HOST_REMOVED, HOST_UPDATED. In combination with other applications, this could lead to the absence of intended code execution.
Weakness classification
- nvd@nist.gov: CWE-755
Primary references
- cve@mitre.org — Technical Description, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Technical Description, Third Party Advisory