PT-2003-1291 · Cisco+2 · Cisco Ons15454+3

Publicado 2003-03-18 · Atualizado 2018-10-30 · CVE-2002-1558

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cisco ONS15454 and ONS15327 versions prior to 3.4

Description The issue allows remote attackers to gain privileges by connecting to an account via Telnet, as there is an account for the VxWorks Operating System in the TCC, TCC+, and XTC that cannot be changed or disabled.

Recommendations For versions prior to 3.4, consider restricting access to the Telnet service to minimize the risk of exploitation. As a temporary workaround, limit connections to the affected account until a fix is available.

Correção

Identificadores relacionados

CVE-2002-1558

Produtos afetados

Cisco Ons15327

Cisco Ons15454

Telnet

Vxworks Operating System

Referências · 4

• http://cisco.com/warp/public/707/ons-multiple-vuln-pub.shtml · Aviso do Fabricante
• http://iss.net/security_center/static/10510.php · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2002-1558 · Nota de Segurança
• http://securityfocus.com/bid/6083 · Aviso do Fabricante