cve/2019/CVE-2019-1010252.md

### [CVE-2019-1010252](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1010252)
![](https://img.shields.io/static/v1?label=Product&message=ONOS&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=2.0.0%20and%20earlier%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=Poor%20Input-validation&color=brightgreen)

### Description

The Linux Foundation ONOS 2.0.0 and earlier is affected by: Poor Input-validation. The impact is: A network administrator (or attacker) can install unintended flow rules in the switch by mistake. The component is: applyFlowRules() and apply() functions in FlowRuleManager.java. The attack vector is: network management and connectivity.

### POC

#### Reference
- https://drive.google.com/open?id=1ce1uqcJYI-sEENGbPmmw-uJTwCXTUyJn

#### Github
No PoCs found on GitHub currently.