Vulnerability in Cisco Optical Networking Systems Software

CVE-2002-1556

Cisco ONS15454 and ONS15327 running ONS before 3.4 allows attackers to cause a denial of service (reset) via an HTTP request to the TCC, TCC+ or XTC, in which the request contains an invalid CORBA Interoperable Object Reference (IOR).

EPSS: 0.014 (69.5th percentile) — read the EPSS interpretation.

Affected products

Cisco Optical_networking_systems_software — versions 3.0, 3.1.0, 3.2
N/a — versions n/a

References

cve@mitre.org (Patch, vdb-entry, x_refsource_BID, Vendor Advisory)
cve@mitre.org (Patch, vdb-entry, Vendor Advisory, x_refsource_XF)
cve@mitre.org (x_refsource_CISCO, vendor-advisory, Patch, Vendor Advisory)