PT-2004-2349 · Cisco · Cisco Ons 15454+2

Published 2004-12-31 · Updated 2018-10-30 · CVE-2004-1434

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions: Cisco ONS 15327 versions 4.0(0) through 4.1(2), 4.5(x) and earlier Cisco ONS 15454 versions 4.0(0) through 4.1(2), 4.5(x) and earlier Cisco ONS 15454 SDH versions 4.0(0) through 4.1(2), 4.5(x) and earlier

Description: The issue allows remote attackers to cause a denial of service, resulting in a control card reset, by sending malformed SNMP packets.

Recommendations: For Cisco ONS 15327 versions 4.0(0) through 4.1(2), 4.5(x) and earlier, restrict access to SNMP to minimize the risk of exploitation. For Cisco ONS 15454 versions 4.0(0) through 4.1(2), 4.5(x) and earlier, restrict access to SNMP to minimize the risk of exploitation. For Cisco ONS 15454 SDH versions 4.0(0) through 4.1(2), 4.5(x) and earlier, restrict access to SNMP to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2004-1434

Affected Products

Cisco Ons 15327

Cisco Ons 15454

Cisco Ons 15454 Sdh

References · 6

• 🔥 http://kb.cert.org/vuls/id/548968 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2004-1434 · Security Note
• http://cisco.com/warp/public/707/cisco-sa-20040721-ons.shtml · Vendor Advisory
• http://secunia.com/advisories/12117 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16765 · Note
• http://securityfocus.com/bid/10768 · Note