CVE-2015-7516: ONOS before 1.5.0 when using the ifwd app allows remote attackers to cause a denial of service (NULL pointe...

Security readout for executives and security teams

This issue affects ONOS controllers before 1.5.0 when the ifwd application is used. A remote attacker could cause a denial of service that disconnects a switch, disrupting software-defined networking operations. The provided sources do not include CVSS scoring or evidence of active exploitation. Exposure is likely limited to environments running ONOS versions before 1.5.0 with the ifwd app in use. Organizations without ONOS, without ifwd, or already on 1.5.0 or later are not shown as affected by the supplied sources. Prioritize if ONOS controls production network forwarding or critical lab infrastructure. The business risk is availability disruption, not data theft, based on provided sources. Urgency is moderate where affected deployments exist, but overall severity cannot be scored from the supplied evidence. Mitigation focus: Inventory ONOS deployments and confirm whether any are below version 1.5.0.; Check whether the ifwd application is enabled or required in each ONOS environment.; Review ONOS advisory, Jira ONOS-3349, and Gerrit 6137 for vendor remediation guidance..

Prepared

Jun 12, 2026, 21:19 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.