CVEvulnerability
CVE-2013-6701
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-12-18
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
- Weaknesses
- CWE-20
Description
The tNetTaskLimit process on the Transport Node Controller (TNC) on Cisco ONS 15454 devices with software 9.6 and earlier does not properly prioritize health pings, which allows remote attackers to cause a denial of service (watchdog timeout and TNC reset) via a flood of network traffic, aka Bug ID CSCud97155.
Affected configurations
• cisco cisco ons 15454 system software 9.0
• cisco cisco ons 15454 system software 9.1
• cisco cisco ons 15454 system software 9.2
• cisco cisco ons 15454 system software 9.2.1
• cisco cisco ons 15454 system software 9.2.2
• cisco cisco ons 15454 system software 9.3
• cisco cisco ons 15454 system software 9.4
• cisco cisco ons 15454 system software 9.6
• cisco ons 15454 mspp
• cisco ons 15454 mstp
• cisco ons 15454e optical transport platform
• cisco ons 15454
• cisco ons 15454 multiservice transport platform
• cisco ons 15454 sdh multiservice provisioning platform
• cisco ons 15454 sonet multiservice provisioning platform
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6701 Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=32200 Vendor Advisory
- http://www.securitytracker.com/id/1029512 Third Party Advisory, VDB Entry
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6701 Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=32200 Vendor Advisory
- http://www.securitytracker.com/id/1029512 Third Party Advisory, VDB Entry