CVE-2024-51406

{"id": "CVE-2024-51406", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.2, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 2.5}]}, "published": "2024-11-01T14:15:07.073", "references": [{"url": "https://github.com/floodlight/floodlight", "tags": ["Product"], "source": "cve@mitre.org"}, {"url": "https://github.com/floodlight/floodlight/issues/870", "tags": ["Exploit", "Issue Tracking"], "source": "cve@mitre.org"}, {"url": "https://ieeexplore.ieee.org/document/10246976", "tags": ["Technical Description"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-290"}]}], "descriptions": [{"lang": "en", "value": "Floodlight SDN Open Flow Controller v.1.2 has an issue that allows local hosts to build fake LLDP packets that allow specific clusters to be missed by Floodlight, which in turn leads to missed hosts inside and outside the cluster."}, {"lang": "es", "value": " Floodlight SDN Open Flow Controller v.1.2 tiene un problema que permite que los hosts locales creen paquetes LLDP falsos que hacen que Floodlight no detecte cl\u00fasteres espec\u00edficos, lo que a su vez genera que no se detecten hosts dentro y fuera del cl\u00faster."}], "lastModified": "2025-06-11T14:15:56.927", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:projectfloodlight:open_sdn_controller:1.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "77E9C7A7-16A2-4634-95C8-F54852F36396"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}