Lucene search
HistoryMar 31, 2003 - 5:00 a.m.
CVE-2002-1558
cisco
ons15454
ons15327
vxworks
account vulnerability
telnet
privilege escalation
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
7 High
AI Score
Confidence
Low
0.005 Low
EPSS
Percentile
77.6%
Cisco ONS15454 and ONS15327 running ONS before 3.4 have an account for the VxWorks Operating System in the TCC, TCC+ and XTC that cannot be changed or disabled, which allows remote attackers to gain privileges by connecting to the account via Telnet.
Affected configurations
Node
ciscooptical_networking_systems_softwareMatch3.0
ORciscooptical_networking_systems_softwareMatch3.1.0
ORciscooptical_networking_systems_softwareMatch3.2
ORciscooptical_networking_systems_softwareMatch3.2.0
ORciscooptical_networking_systems_softwareMatch3.3.0
Related
cvelist
cvelist
CVE-2002-1558
2003-03-18 05:00:00
nvd
nvd
CVE-2002-1558
2003-03-31 05:00:00
nessus
nessus
Cisco ONS Multiple Remote Vulnerabilities (20040219-ONS)
2005-01-18 00:00:00
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
7 High
AI Score
Confidence
Low
0.005 Low
EPSS
Percentile
77.6%
Related for CVE-2002-1558