Vulnerability in Cisco Optical Networking Systems Software

CVE-2002-1554

Cisco ONS15454 and ONS15327 running ONS before 3.4 stores usernames and passwords in cleartext in the image database for the TCC, TCC+ or XTC, which could allow attackers to gain privileges by obtaining the passwords from the image database or a backup.

EPSS: 0.004 (28.3th percentile) — read the EPSS interpretation.

Affected products

Cisco Optical_networking_systems_software — versions 3.0, 3.1.0, 3.2
N/a — versions n/a

References

cve@mitre.org (Patch, vdb-entry, Vendor Advisory, x_refsource_XF)
cve@mitre.org (Patch, vdb-entry, x_refsource_BID, Vendor Advisory)
cve@mitre.org (x_refsource_CISCO, vendor-advisory, Patch, Vendor Advisory)