Access Control Bypass in OpenDaylight Service Function Chaining Software by Linux Foundation
CVE-2025-29315

9.8CRITICAL

Key Information:

Vendor: Linux Foundation
Status: OpenDaylight Service Function Chaining
Vendor: CVE Published:; 24 March 2025

🔔 Create Linux Foundation Vulnerability Alert

What is CVE-2025-29315?

A vulnerability exists in the Role-based Access Control (RBAC) mechanism of the OpenDaylight Service Function Chaining (SFC). This issue allows attackers to perform unauthorized privileged operations by sending specially crafted requests. Systems running SFC Sodium-SR4 or earlier versions are particularly at risk, making it essential for users and organizations to implement appropriate security measures to safeguard against potential exploitation.

References

https://blog.csdn.net/weixin_43959580/article/details/144...

CVSS V3.1

Score:

9.8

Severity:

CRITICAL

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Mar 24, 2025

CVE-2025-29315 Data

JSON