Open Network Foundation ONOS Fake IP/MAC Address Vulnerability Allowing Man-in-the-Middle Attacks

A vulnerability in Open Network Foundation ONOS version 2.7.0 allows attackers to generate fake IP and MAC addresses. This could lead to a man-in-the-middle attack, intercepting communications between real and fake hosts.

Impact

Exploitation of this vulnerability could allow for unauthorized interception and manipulation of network communications, creating a man-in-the-middle scenario between genuine and fabricated hosts.

Reproduction

To reproduce this vulnerability, send a crafted PACKET_OUT message with the egress port set to 255, which is the default controller port for BMv2 switches. This will create a fake IP/MAC address that can be used to intercept communications.