CVEvulnerability
CVE-2004-0308
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2004-11-24
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Description
Unknown vulnerability in Cisco ONS 15327 before 4.1(3), ONS 15454 before 4.6(1), ONS 15454 SD before 4.1(3), and Cisco ONS15600 before 1.3(0) allows a superuser whose account is locked out, disabled, or suspended to gain unauthorized access via a Telnet connection to the VxWorks shell.
Affected configurations
• cisco optical networking systems software 1.0
• cisco optical networking systems software 4.0\(1\)
• cisco optical networking systems software 4.0\(2\)
• cisco optical networking systems software 4.0.0
• cisco optical networking systems software 4.1\(0\)
• cisco optical networking systems software 4.1\(1\)
• cisco optical networking systems software 4.1\(2\)
• cisco optical networking systems software 4.1\(3\)
• cisco optical networking systems software 4.1.0
• cisco optical networking systems software 4.5
References
- http://www.cisco.com/warp/public/707/cisco-sa-20040219-ONS.shtml Patch, Vendor Advisory
- http://www.osvdb.org/4010 www.osvdb.org
- http://www.securityfocus.com/bid/9699 Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15266 exchange.xforce.ibmcloud.com
- http://www.cisco.com/warp/public/707/cisco-sa-20040219-ONS.shtml Patch, Vendor Advisory
- http://www.osvdb.org/4010 www.osvdb.org
- http://www.securityfocus.com/bid/9699 Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15266 exchange.xforce.ibmcloud.com