Cisco Ons 15454 vulnerabilities

7 CVEs affecting Cisco Ons 15454, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2014-2142, published 2014-04-12.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2013-6702, published 2013-12-04. Medium severity, CVSS 4.3. EPSS: 1.9% chance of exploitation in the next 30 days. The management implementation on Cisco ONS 15454 controller cards with software 9.8 and earlier allows remote attackers to cause a denial of service (card reset) via crafted packets, aka Bug ID…
CVE-2013-6701, published 2013-12-18. Medium severity, CVSS 5.0. EPSS: 1.9% chance of exploitation in the next 30 days. The tNetTaskLimit process on the Transport Node Controller (TNC) on Cisco ONS 15454 devices with software 9.6 and earlier does not properly prioritize health pings, which allows remote attackers to…
CVE-2014-2142, published 2014-04-12. Medium severity, CVSS 5.0. EPSS: 1.8% chance of exploitation in the next 30 days. Cisco ONS 15454 controller cards with software 10.0 and earlier allow remote attackers to cause a denial of service (card reload) via a crafted HTTP URI, aka Bug ID CSCun06870.
CVE-2014-2140, published 2014-04-12. Medium severity, CVSS 5.0. EPSS: 1.8% chance of exploitation in the next 30 days. Cisco ONS 15454 controller cards with software 9.6 and earlier allow remote attackers to cause a denial of service (card reset) via a TCP FIN attack that triggers file-descriptor exhaustion and a…
CVE-2014-2139, published 2014-04-12. Medium severity, CVSS 5.0. EPSS: 1.8% chance of exploitation in the next 30 days. Cisco ONS 15454 controller cards with software 9.6 and earlier allow remote attackers to cause a denial of service (flash write outage) via a TCP FIN attack that triggers file-descriptor exhaustion,…
CVE-2014-2141, published 2014-04-10. Medium severity, CVSS 4.0. EPSS: 1.4% chance of exploitation in the next 30 days. The session-termination functionality on Cisco ONS 15454 controller cards with software 9.6 and earlier does not initialize an unspecified pointer, which allows remote authenticated users to cause a…
CVE-2013-6703, published 2013-12-03. High severity, CVSS 7.1. EPSS: 1.3% chance of exploitation in the next 30 days. The TLS/SSLv3 module on Cisco ONS 15454 controller cards allows remote attackers to cause a denial of service (card reset) via crafted (1) TLS or (2) SSLv3 packets, aka Bug ID CSCuh34787.