Cisco Optical Networking Systems Software vulnerabilities

20 CVEs affecting Cisco Optical Networking Systems Software, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2006-1672, published 2006-04-07.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2003-0567, published 2003-08-18. High severity, CVSS 7.8. EPSS: 16.6% chance of exploitation in the next 30 days. Cisco IOS 11.x and 12.0 through 12.2 allows remote attackers to cause a denial of service (traffic block) by sending a particular sequence of IPv4 packets to an interface on the device, causing the…
CVE-2006-1672, published 2006-04-07. High severity, CVSS 7.5. EPSS: 4.1% chance of exploitation in the next 30 days. The installation of Cisco Transport Controller (CTC) for Cisco Optical Networking System (ONS) 15000 series nodes adds a Java policy file entry with a wildcard that grants the…
CVE-2004-1433, published 2004-12-31. Medium severity, CVSS 5.0. EPSS: 4.1% chance of exploitation in the next 30 days. Multiple versions of Cisco ONS 15327, ONS 15454, and ONS 15454 SDH, including 4.6(0) and 4.6(1), 4.5(x), 4.1(0) to 4.1(3), 4.0(0) to 4.0(2), and earlier versions, and ONS 15600 1.x(x), allows remote…
CVE-2004-1432, published 2004-12-31. Medium severity, CVSS 5.0. EPSS: 4.1% chance of exploitation in the next 30 days. Multiple versions of Cisco ONS 15327, ONS 15454, and ONS 15454 SDH, including 4.6(0) and 4.6(1), 4.5(x), 4.1(0) to 4.1(3), 4.0(0) to 4.0(2), and earlier versions, allows remote attackers to cause a…
CVE-2004-1434, published 2004-12-31. Medium severity, CVSS 5.0. EPSS: 3.3% chance of exploitation in the next 30 days. Multiple versions of Cisco ONS 15327, ONS 15454, and ONS 15454 SDH, including 4.1(0) to 4.1(2), 4.5(x), 4.0(0) to 4.0(2), and earlier versions, allows remote attackers to cause a denial of service…
CVE-2004-1435, published 2004-12-31. Medium severity, CVSS 5.0. EPSS: 3.2% chance of exploitation in the next 30 days. Multiple versions of Cisco ONS 15327, ONS 15454, and ONS 15454 SDH, including 4.6(0) and 4.6(1), 4.5(x), 4.1(0) to 4.1(3), 4.0(0) to 4.0(2), and earlier versions, allows remote attackers to cause a…
CVE-2004-1436, published 2004-12-31. High severity, CVSS 7.5. EPSS: 3.1% chance of exploitation in the next 30 days. The Transaction Language 1 (TL1) login interface in Cisco ONS 15327 4.6(0) and 4.6(1) and 15454 and 15454 SDH 4.6(0) and 4.6(1), when a user account is configured with a blank password, allows remote…
CVE-2002-1558, published 2003-03-31. High severity, CVSS 10.0. EPSS: 2.8% chance of exploitation in the next 30 days. Cisco ONS15454 and ONS15327 running ONS before 3.4 have an account for the VxWorks Operating System in the TCC, TCC+ and XTC that cannot be changed or disabled, which allows remote attackers to gain…
CVE-2004-0714, published 2004-07-27. Medium severity, CVSS 5.0. EPSS: 2.6% chance of exploitation in the next 30 days. Cisco Internetwork Operating System (IOS) 12.0S through 12.3T attempts to process SNMP solicited operations on improper ports (UDP 162 and a randomly chosen UDP port), which allows remote attackers…
CVE-2006-1671, published 2006-04-07. Medium severity, CVSS 5.0. EPSS: 2.4% chance of exploitation in the next 30 days. Control cards for Cisco Optical Networking System (ONS) 15000 series nodes before 20060405 allow remote attackers to cause a denial of service (card reset) via (1) a "crafted" IP packet to a device…

Latest

CVE-2006-1670, published 2006-04-07. High severity, CVSS 7.8. EPSS: 2.3% chance of exploitation in the next 30 days. Control cards for Cisco Optical Networking System (ONS) 15000 series nodes before 20060405 allow remote attackers to cause a denial of service (memory exhaustion and possibly card reset) by sending…
CVE-2004-0308, published 2004-11-24. High severity, CVSS 10.0. EPSS: 1.7% chance of exploitation in the next 30 days. Unknown vulnerability in Cisco ONS 15327 before 4.1(3), ONS 15454 before 4.6(1), ONS 15454 SD before 4.1(3), and Cisco ONS15600 before 1.3(0) allows a superuser whose account is locked out, disabled,…
CVE-2004-0307, published 2004-11-23. Medium severity, CVSS 5.0. EPSS: 1.6% chance of exploitation in the next 30 days. Cisco ONS 15327 before 4.1(3), ONS 15454 before 4.6(1), and ONS 15454 SD before 4.1(3) allows remote attackers to cause a denial of service (reset) by not sending the ACK portion of the TCP three-way…