Critical severity9.8NVD Advisory· Published Mar 24, 2025· Updated Jun 17, 2026

CVE-2025-29310

Description

An issue in onos v2.7.0 allows attackers to trigger a packet deserialization problem when supplying a crafted LLDP packet. This vulnerability allows attackers to execute arbitrary commands or access network information.

Affected products

Opennetworking/Onos
cpe:2.3:a:opennetworking:onos:2.7.0:-:*:*:*:*:*:*
onos/onosdescription
Onosproject/Onosllm-create
Range: =2.7.0

Patches

Vulnerability mechanics

References

gist.github.com/Saber-Berserker/10c9d548b38fa988310d90b8314e3129.nvdBroken Link

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000