CVEvulnerability
CVE-2004-1436
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2004-12-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
The Transaction Language 1 (TL1) login interface in Cisco ONS 15327 4.6(0) and 4.6(1) and 15454 and 15454 SDH 4.6(0) and 4.6(1), when a user account is configured with a blank password, allows remote attackers to gain unauthorized access by logging in with a password larger than 10 characters.
Affected configurations
• cisco optical networking systems software 1.0
• cisco optical networking systems software 1.1
• cisco optical networking systems software 1.1\(0\)
• cisco optical networking systems software 1.1\(1\)
• cisco optical networking systems software 1.3\(0\)
• cisco optical networking systems software 2.3\(5\)
• cisco optical networking systems software 3.0
• cisco optical networking systems software 3.1.0
• cisco optical networking systems software 3.2
• cisco optical networking systems software 3.2.0
• cisco optical networking systems software 3.3.0
• cisco optical networking systems software 3.4.0
• cisco optical networking systems software 4.0\(0\)
• cisco optical networking systems software 4.0\(1\)
• cisco optical networking systems software 4.0\(2\)
• cisco optical networking systems software 4.0.0
• cisco optical networking systems software 4.1\(0\)
• cisco optical networking systems software 4.1\(1\)
• cisco optical networking systems software 4.1\(2\)
• cisco optical networking systems software 4.1\(3\)
• cisco optical networking systems software 4.5
• cisco optical networking systems software 4.6\(0\)
• cisco optical networking systems software 4.6\(1\)
References
- http://secunia.com/advisories/12117 secunia.com
- http://www.cisco.com/warp/public/707/cisco-sa-20040721-ons.shtml Vendor Advisory
- http://www.kb.cert.org/vuls/id/760432 Third Party Advisory, US Government Resource
- http://www.securityfocus.com/bid/10768 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16766 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/12117 secunia.com
- http://www.cisco.com/warp/public/707/cisco-sa-20040721-ons.shtml Vendor Advisory
- http://www.kb.cert.org/vuls/id/760432 Third Party Advisory, US Government Resource
- http://www.securityfocus.com/bid/10768 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16766 exchange.xforce.ibmcloud.com