CVE-2024-51406

6.2 mediumEPSS 0.2%

Medium (6.2) in projectfloodlight open sdn controller. EPSS 0.2% chance of exploitation in the next 30 days.

Floodlight SDN Open Flow Controller v.1.2 has an issue that allows local hosts to build fake LLDP packets that allow specific clusters to be missed by Floodlight, which in turn leads to missed hosts inside and outside the cluster.

Severity

CVSS 3.1

6.2 medium

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 14% of CVEs (scores of 2026-10-31)
CWE: CWE-290
Published: 2024-11-01
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

projectfloodlight:open_sdn_controller

References

https://github.com/floodlight/floodlight
https://github.com/floodlight/floodlight/issues/870
https://ieeexplore.ieee.org/document/10246976

Check your stack JSON