PatchTheCVEfloodlight vulnerabilities and fixes
Recent CVEs affecting floodlight, with upgrade or downgrade steps. 3 tracked.
floodlight has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2025-02-06. Highest priority: CVE-2024-51407 (score 31/100).
- CVE-2024-57673 MEDIUM 5.5 DOWNGRADE An issue in floodlight v1.2 allows a local attacker to cause a denial of service via the Topology Manager modu
- CVE-2024-57672 MEDIUM 5.5 DOWNGRADE An issue in floodlight v1.2 allows a local attacker to cause a denial of service via the Topology Manager modu
- CVE-2024-51407 MEDIUM 6.2 DOWNGRADE Floodlight SDN OpenFlow Controller v.1.2 has an issue that allows local hosts to construct false broadcast por
FAQ
How do I fix floodlight vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is floodlight being exploited right now?
None of the tracked floodlight CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which floodlight CVE should I patch first?
CVE-2024-51407 currently ranks highest (31/100): Floodlight SDN OpenFlow Controller v.1.2 has an issue that allows local hosts to construct false broadcast por.