PT-2003-1288 · Cisco · Cisco Ons15454+1

Published 2003-03-18 · Updated 2018-10-30 · CVE-2002-1555

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cisco ONS15454 and ONS15327 versions prior to 3.4

Description The issue allows remote attackers to obtain sensitive information due to the use of a "public" SNMP community string that cannot be changed.

Recommendations For versions prior to 3.4, consider restricting access to the SNMP service until a patch or update is available that allows for the modification of the community string. As a temporary workaround, limit network exposure to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2002-1555

Affected Products

Cisco Ons15327

Cisco Ons15454

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2002-1555 · Security Note
• http://cisco.com/warp/public/707/ons-multiple-vuln-pub.shtml · Vendor Advisory
• http://securityfocus.com/bid/6081 · Vendor Advisory
• http://iss.net/security_center/static/10507.php · Vendor Advisory