Cisco Optical Networking Systems Software — known CVE vulnerabilities

Every CVE whose affected-product data names Cisco Optical Networking Systems Software, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (20)

• CVE-2002-1558 — CVSS 10.0 (critical): Cisco ONS15454 and ONS15327 running ONS before 3.4 have an account for the VxWorks Operating System in the TCC, TCC+ and XTC that cannot be…
• CVE-2004-0308 — CVSS 10.0 (critical): Unknown vulnerability in Cisco ONS 15327 before 4.1(3), ONS 15454 before 4.6(1), ONS 15454 SD before 4.1(3), and Cisco ONS15600 before…
• CVE-2003-0567 — CVSS 7.8 (high): Cisco IOS 11.x and 12.0 through 12.2 allows remote attackers to cause a denial of service (traffic block) by sending a particular sequence…
• CVE-2006-1670 — CVSS 7.8 (high): Control cards for Cisco Optical Networking System (ONS) 15000 series nodes before 20060405 allow remote attackers to cause a denial of…
• CVE-2006-1672 — CVSS 7.5 (high): The installation of Cisco Transport Controller (CTC) for Cisco Optical Networking System (ONS) 15000 series nodes adds a Java policy file…
• CVE-2002-1553 — CVSS 7.5 (high): Cisco ONS15454 and ONS15327 running ONS before 3.4 allows remote attackers to modify the system configuration and delete files by…
• CVE-2004-1436 — CVSS 7.5 (high): The Transaction Language 1 (TL1) login interface in Cisco ONS 15327 4.6(0) and 4.6(1) and 15454 and 15454 SDH 4.6(0) and 4.6(1), when a…
• CVE-2002-1557 — CVSS 5.0 (medium): Cisco ONS15454 and ONS15327 running ONS before 3.4 allows attackers to cause a denial of service (reset to TCC, TCC+, TCCi or XTC) via a…
• CVE-2004-0306 — CVSS 5.0 (medium): Cisco ONS 15327 before 4.1(3), ONS 15454 before 4.6(1), ONS 15454 SD before 4.1(3), and Cisco ONS 15600 before 1.3(0) enable TFTP service…
• CVE-2004-0307 — CVSS 5.0 (medium): Cisco ONS 15327 before 4.1(3), ONS 15454 before 4.6(1), and ONS 15454 SD before 4.1(3) allows remote attackers to cause a denial of service…
• CVE-2002-1555 — CVSS 5.0 (medium): Cisco ONS15454 and ONS15327 running ONS before 3.4 uses a "public" SNMP community string that cannot be changed, which allows remote…
• CVE-2004-0714 — CVSS 5.0 (medium): Cisco Internetwork Operating System (IOS) 12.0S through 12.3T attempts to process SNMP solicited operations on improper ports (UDP 162 and…
• CVE-2004-1432 — CVSS 5.0 (medium): Multiple versions of Cisco ONS 15327, ONS 15454, and ONS 15454 SDH, including 4.6(0) and 4.6(1), 4.5(x), 4.1(0) to 4.1(3), 4.0(0) to…
• CVE-2004-1433 — CVSS 5.0 (medium): Multiple versions of Cisco ONS 15327, ONS 15454, and ONS 15454 SDH, including 4.6(0) and 4.6(1), 4.5(x), 4.1(0) to 4.1(3), 4.0(0) to…
• CVE-2004-1434 — CVSS 5.0 (medium): Multiple versions of Cisco ONS 15327, ONS 15454, and ONS 15454 SDH, including 4.1(0) to 4.1(2), 4.5(x), 4.0(0) to 4.0(2), and earlier…
• CVE-2004-1435 — CVSS 5.0 (medium): Multiple versions of Cisco ONS 15327, ONS 15454, and ONS 15454 SDH, including 4.6(0) and 4.6(1), 4.5(x), 4.1(0) to 4.1(3), 4.0(0) to…
• CVE-2002-0952 — CVSS 5.0 (medium): Cisco ONS15454 optical transport platform running ONS 3.1.0 to 3.2.0 allows remote attackers to cause a denial of service (reset) by…
• CVE-2002-1556 — CVSS 5.0 (medium): Cisco ONS15454 and ONS15327 running ONS before 3.4 allows attackers to cause a denial of service (reset) via an HTTP request to the TCC…
• CVE-2006-1671 — CVSS 5.0 (medium): Control cards for Cisco Optical Networking System (ONS) 15000 series nodes before 20060405 allow remote attackers to cause a denial of…
• CVE-2002-1554 — CVSS 4.6 (medium): Cisco ONS15454 and ONS15327 running ONS before 3.4 stores usernames and passwords in cleartext in the image database for the TCC, TCC+ or…