CVE-2002-1558: Cisco Optical Networking Systems Software

High severity, CVSS 10.0. EPSS: 2.8% chance of exploitation in the next 30 days.

Cisco ONS15454 and ONS15327 running ONS before 3.4 have an account for the VxWorks Operating System in the TCC, TCC+ and XTC that cannot be changed or disabled, which allows remote attackers to gain privileges by connecting to the account via Telnet.

Affected products

• Cisco Optical Networking Systems Software: version 3.0 only; version 3.1.0 only; version 3.2 only; version 3.2.0 only; version 3.3.0 only

Published 2003-03-31. Last modified 2026-06-16.