PT-2003-1288 · Cisco · Cisco Ons15454+1

Publicado 2003-03-18 · Atualizado 2018-10-30 · CVE-2002-1555

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cisco ONS15454 and ONS15327 versions prior to 3.4

Description The issue allows remote attackers to obtain sensitive information due to the use of a "public" SNMP community string that cannot be changed.

Recommendations For versions prior to 3.4, consider restricting access to the SNMP service until a patch or update is available that allows for the modification of the community string. As a temporary workaround, limit network exposure to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2002-1555

Produtos afetados

Cisco Ons15327

Cisco Ons15454

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2002-1555 · Nota de Segurança
• http://cisco.com/warp/public/707/ons-multiple-vuln-pub.shtml · Aviso do Fabricante
• http://securityfocus.com/bid/6081 · Aviso do Fabricante
• http://iss.net/security_center/static/10507.php · Aviso do Fabricante