CVE-2006-1671
CVE-2006-1671 is a medium-severity vulnerability in Cisco Transport Controller with a CVSS 2.0 base score of 5.0. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.
Key facts
- Severity: Medium (CVSS 2.0 base score 5.0)
- EPSS exploit prediction: 2% (82nd percentile)
- Actively exploited: Not listed in CISA KEV
- Affected product: Cisco Transport Controller
- Published:
- Last modified:
Description
Control cards for Cisco Optical Networking System (ONS) 15000 series nodes before 20060405 allow remote attackers to cause a denial of service (card reset) via (1) a "crafted" IP packet to a device with secure mode EMS-to-network-element access, aka bug ID CSCsc51390; (2) a "crafted" IP packet to a device with IP on the LAN interface, aka bug ID CSCsd04168; and (3) a "malformed" OSPF packet, aka bug ID CSCsc54558.
Frequently asked questions
- What is CVE-2006-1671?
- Control cards for Cisco Optical Networking System (ONS) 15000 series nodes before 20060405 allow remote attackers to cause a denial of service (card reset) via (1) a "crafted" IP packet to a device with secure mode EMS-to-network-element access, aka bug ID CSCsc51390; (2) a "crafted" IP packet to a device with IP on the LAN interface, aka bug ID CSCsd04168; and (3) a "malformed" OSPF packet, aka bug ID CSCsc54558.
- How severe is CVE-2006-1671?
- CVE-2006-1671 has a CVSS 2.0 base score of 5.0, rated medium severity.
- Is CVE-2006-1671 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 2% (82nd percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2006-1671?
- CVE-2006-1671 primarily affects Cisco Transport Controller. In total, 24 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
- How do I fix CVE-2006-1671?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
- When was CVE-2006-1671 published?
- CVE-2006-1671 was published on 2006-04-07 and last updated on 2026-06-16.
References
- http://secunia.com/advisories/19553
- http://securitytracker.com/id?1015872
- http://www.cisco.com/warp/public/707/cisco-sa-20060405-ons.shtml
- http://www.osvdb.org/24435
- http://www.osvdb.org/24436
- http://www.osvdb.org/24437
- http://www.securityfocus.com/bid/17384
- http://www.vupen.com/english/advisories/2006/1256
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25644
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25645
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25646
Affected products (24)
- cpe:2.3:a:cisco:transport_controller:4.0.x:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:optical_networking_systems_software:1.0:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:optical_networking_systems_software:1.1:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:optical_networking_systems_software:1.1\(0\):*:*:*:*:*:*:*
- cpe:2.3:a:cisco:optical_networking_systems_software:1.1\(1\):*:*:*:*:*:*:*
- cpe:2.3:a:cisco:optical_networking_systems_software:1.3\(0\):*:*:*:*:*:*:*
- cpe:2.3:a:cisco:optical_networking_systems_software:3.0:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:optical_networking_systems_software:3.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:optical_networking_systems_software:3.2:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:optical_networking_systems_software:3.3.0:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:optical_networking_systems_software:3.4.0:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:optical_networking_systems_software:4.0\(1\):*:*:*:*:*:*:*
- cpe:2.3:a:cisco:optical_networking_systems_software:4.0\(2\):*:*:*:*:*:*:*
- cpe:2.3:a:cisco:optical_networking_systems_software:4.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:optical_networking_systems_software:4.1\(0\):*:*:*:*:*:*:*
- cpe:2.3:a:cisco:optical_networking_systems_software:4.1\(1\):*:*:*:*:*:*:*
- cpe:2.3:a:cisco:optical_networking_systems_software:4.1\(2\):*:*:*:*:*:*:*
- cpe:2.3:a:cisco:optical_networking_systems_software:4.1\(3\):*:*:*:*:*:*:*
- cpe:2.3:a:cisco:optical_networking_systems_software:4.1.4:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:optical_networking_systems_software:4.6\(0\):*:*:*:*:*:*:*
- cpe:2.3:a:cisco:optical_networking_systems_software:4.6\(1\):*:*:*:*:*:*:*
- cpe:2.3:h:cisco:ons_15310-cl_series:0:*:*:*:*:*:*:*
- cpe:2.3:h:cisco:ons_15600:0:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:ons_15454_mspp:*:*:*:*:*:*:*:*
More vulnerabilities in Cisco Transport Controller
- CVE-2006-1672 — High (CVSS 7.5): The installation of Cisco Transport Controller (CTC) for Cisco Optical Networking System (ONS) 15000 series nodes adds…