[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

250038

 
 

909

 
 

195843

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2002-1553Date: (C)2003-03-31   (M)2023-12-22


Cisco ONS15454 and ONS15327 running ONS before 3.4 allows remote attackers to modify the system configuration and delete files by establishing an FTP connection to the TCC, TCC+ or XTC using a username and password that does not exist.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 7.5
Exploit Score: 10.0
Impact Score: 6.4
 
CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality: PARTIAL
Integrity: PARTIAL
Availability: PARTIAL
  
Reference:
http://www.cisco.com/warp/public/707/ons-multiple-vuln-pub.shtml
BID-6076
cisco-ons-ftp-no-account(10505)

CPE    8
cpe:/o:cisco:ons_15454_optical_transport_platform:3.3
cpe:/o:cisco:ons_15327:3.0
cpe:/o:cisco:ons_15327:3.2
cpe:/o:cisco:ons_15454_optical_transport_platform:3.0
...

© SecPod Technologies