CVE-2004-0308: Cisco Optical Networking Systems Software

High severity, CVSS 10.0. EPSS: 1.7% chance of exploitation in the next 30 days.

Unknown vulnerability in Cisco ONS 15327 before 4.1(3), ONS 15454 before 4.6(1), ONS 15454 SD before 4.1(3), and Cisco ONS15600 before 1.3(0) allows a superuser whose account is locked out, disabled, or suspended to gain unauthorized access via a Telnet connection to the VxWorks shell.

Affected products

• Cisco Optical Networking Systems Software: version 1.0 only; version 4.0(1) only; version 4.0(2) only; version 4.0.0 only; version 4.1(0) only; version 4.1(1) only; …

Published 2004-11-24. Last modified 2026-06-16.