Cisco Ons 15454 System Software vulnerabilities

5 CVEs affecting Cisco Ons 15454 System Software, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2014-2142, published 2014-04-12.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2013-6701, published 2013-12-18. Medium severity, CVSS 5.0. EPSS: 1.9% chance of exploitation in the next 30 days. The tNetTaskLimit process on the Transport Node Controller (TNC) on Cisco ONS 15454 devices with software 9.6 and earlier does not properly prioritize health pings, which allows remote attackers to…
CVE-2014-2142, published 2014-04-12. Medium severity, CVSS 5.0. EPSS: 1.8% chance of exploitation in the next 30 days. Cisco ONS 15454 controller cards with software 10.0 and earlier allow remote attackers to cause a denial of service (card reload) via a crafted HTTP URI, aka Bug ID CSCun06870.
CVE-2014-2140, published 2014-04-12. Medium severity, CVSS 5.0. EPSS: 1.8% chance of exploitation in the next 30 days. Cisco ONS 15454 controller cards with software 9.6 and earlier allow remote attackers to cause a denial of service (card reset) via a TCP FIN attack that triggers file-descriptor exhaustion and a…
CVE-2014-2139, published 2014-04-12. Medium severity, CVSS 5.0. EPSS: 1.8% chance of exploitation in the next 30 days. Cisco ONS 15454 controller cards with software 9.6 and earlier allow remote attackers to cause a denial of service (flash write outage) via a TCP FIN attack that triggers file-descriptor exhaustion,…
CVE-2014-2141, published 2014-04-10. Medium severity, CVSS 4.0. EPSS: 1.4% chance of exploitation in the next 30 days. The session-termination functionality on Cisco ONS 15454 controller cards with software 9.6 and earlier does not initialize an unspecified pointer, which allows remote authenticated users to cause a…