VULNERABILITY INTELLIGENCE

CVE-2024-51406

CVSS score6.2 MEDIUM
EPSS probability0.23%
CISA KEVNot currently listed
Published2024-11-01
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Description

Floodlight SDN Open Flow Controller v.1.2 has an issue that allows local hosts to build fake LLDP packets that allow specific clusters to be missed by Floodlight, which in turn leads to missed hosts inside and outside the cluster.

Weakness classification

  • nvd@nist.gov: CWE-290

Primary references