« Volver al listado

CVE-2025-48016

Estado: AplazadaMedia (4.3)—

OpenFlow discovery protocol can exhaust resources because it is not rate limited

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2025-48016",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2025-48016",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2025-05-20T15:54:59.144434Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "security@selinc.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 4.3,
          "attackVector": "ADJACENT_NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "LOW",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 1.4,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "security@selinc.com",
      "affectedData": [
        {
          "vendor": "Schweitzer Engineering Laboratories",
          "product": "SEL-5056 Software-Defined Network Flow Controller",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "2.16.0",
              "versionType": "custom"
            }
          ],
          "platforms": [
            "Windows"
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "Schweitzer Engineering Laboratories",
          "product": "SEL-5056 Software-Defined Network Flow Controller",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "2.16.0",
              "versionType": "custom"
            }
          ],
          "platforms": [
            "SEL Blueframe"
          ],
          "defaultStatus": "unaffected"
        }
      ]
    }
  ],
  "published": "2025-05-20T16:15:35.277",
  "references": [
    {
      "url": "https://selinc.com/products/software/latest-software-versions/",
      "source": "security@selinc.com"
    }
  ],
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "security@selinc.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-799"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "OpenFlow discovery protocol can exhaust resources because it is not rate limited"
    },
    {
      "lang": "es",
      "value": "El protocolo de descubrimiento OpenFlow puede agotar los recursos porque no tiene límite de velocidad"
    }
  ],
  "lastModified": "2026-06-17T09:29:01.340",
  "sourceIdentifier": "security@selinc.com"
}