PT-2015-4870 · Cisco · Cisco Ons 15454 System

Published 2015-06-04 · Updated 2017-01-04 · CVE-2015-0765

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Cisco ONS 15454 System Software versions 10.30 through 10.301

Description The issue allows remote attackers to cause a denial of service, either through tNetTask CPU consumption or card reset, by flooding the system with IP or Ethernet traffic.

Recommendations For versions 10.30 through 10.301, consider restricting access to the system to minimize the risk of exploitation by limiting the amount of IP and Ethernet traffic that can be sent to the system.

Fix

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2015-0765

Affected Products

Cisco Ons 15454 System

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2015-0765 · Security Note
• http://tools.cisco.com/security/center/viewAlert.x?alertId=39172 · Vendor Advisory
• http://securitytracker.com/id/1032483 · Note