Critical severity9.1NVD Advisory· Published May 31, 2024· Updated Jun 17, 2026

CVE-2024-37018

Description

The OpenDaylight 0.15.3 controller allows topology poisoning via API requests because an application can manipulate the path that is taken by discovery packets.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Opendaylight/Controllerinferred2 versions
<=0.15.3+ 1 more
- (no CPE)range: <=0.15.3
- (no CPE)range: =0.15.3

Patches

Vulnerability mechanics

References

dl.acm.org/doi/10.1145/3658644.3690345nvd
jira.opendaylight.org/browse/DISCOVERY-2nvd
mvnrepository.com/artifact/org.opendaylight.controllernvd

News mentions

No linked articles in our index yet.

cvss	0.591
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000