Lucene search

[email protected]CVE-2002-1555

HistoryMar 31, 2003 - 5:00 a.m.

CVE-2002-1555

2003-03-3105:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cisco

ons15454

ons15327

vulnerability

snmp

community string

information security

6.7 Medium

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.002 Low

EPSS

Percentile

61.8%

JSON

Cisco ONS15454 and ONS15327 running ONS before 3.4 uses a “public” SNMP community string that cannot be changed, which allows remote attackers to obtain sensitive information.

CPENameOperatorVersion
cisco:optical_networking_systems_softwarecisco optical networking systems softwareeq3.2
cisco:optical_networking_systems_softwarecisco optical networking systems softwareeq3.3.0
cisco:optical_networking_systems_softwarecisco optical networking systems softwareeq3.1.0
cisco:optical_networking_systems_softwarecisco optical networking systems softwareeq3.2.0
cisco:optical_networking_systems_softwarecisco optical networking systems softwareeq3.0

CPE	Name	Operator	Version
cisco:optical_networking_systems_software	cisco optical networking systems software	eq	3.2
cisco:optical_networking_systems_software	cisco optical networking systems software	eq	3.3.0
cisco:optical_networking_systems_software	cisco optical networking systems software	eq	3.1.0
cisco:optical_networking_systems_software	cisco optical networking systems software	eq	3.2.0
cisco:optical_networking_systems_software	cisco optical networking systems software	eq	3.0

References

www.cisco.com/warp/public/707/ons-multiple-vuln-pub.shtml

www.iss.net/security_center/static/10507.php

www.securityfocus.com/bid/6081

6.7 Medium

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.002 Low

EPSS

Percentile

61.8%

JSON

Related for CVE-2002-1555

cvelist1 nessus1