by Kastro
Paper/Archive/CVE-2020-18685

CVE-2020-18685

mitre — Floodlight through 1.2 has poor input validation in checkFlow in StaticFlowEntryPusherResource.java because of unchecked prerequisites re…

EPSS 1%CVSS 9.8
critical.is priorityof 100
44
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 70.3.703 × 2014.1No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

Floodlight through 1.2 has poor input validation in checkFlow in StaticFlowEntryPusherResource.java because of unchecked prerequisites related to TCP or UDP ports, or group or table IDs.

Affected

ProductAffectedFixed inSource
n/an/a–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refdrive.google.com/open?id=1oIt6jViGxLALUkLVELsQpC26MJYFZt2U