CVE-2019-12120

CVE-2019-12120 describes a critical unauthenticated remote code execution vulnerability affecting ONAP VNFSDK through Dublin, specifically impacting all ONAP Operations Manager (OOM) setups. An attacker with existing pod-to-pod communication access can exploit this by accessing port 8000 of the demo-vnfsdk-vnfsdk. With a CVSS score of 9.8 (CRITICAL), the vulnerability has a network attack vector, low attack complexity, and results in complete compromise of confidentiality, integrity, and availability. Despite its high severity, there is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.