High severity7.5NVD Advisory· Published Mar 24, 2025· Updated Jun 17, 2026

CVE-2025-29311

Description

Limited secret space in LLDP packets used in onos v2.7.0 allows attackers to obtain the private key via a bruteforce attack. Attackers are able to leverage this vulnerability into creating crafted LLDP packets.

Affected products

Opennetworking/Onos
cpe:2.3:a:opennetworking:onos:2.7.0:-:*:*:*:*:*:*
onos/onosdescription
Onosproject/Onosllm-create
Range: =2.7.0

Patches

Vulnerability mechanics

References

gist.github.com/Saber-Berserker/790f2a75ae482df3fd0fce569f30504a;nvdBroken Link

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000