Vulnerability in Cisco Optical Networking Systems Software

CVE-2002-1557

Cisco ONS15454 and ONS15327 running ONS before 3.4 allows attackers to cause a denial of service (reset to TCC, TCC+, TCCi or XTC) via a malformed HTTP request that does not contain a leading / (slash) character.

EPSS: 0.014 (69.5th percentile) — read the EPSS interpretation.

Affected products

Cisco Optical_networking_systems_software — versions 3.0, 3.1.0, 3.2
N/a — versions n/a

References

cve@mitre.org (Patch, vdb-entry, x_refsource_BID, Vendor Advisory)
cve@mitre.org (Patch, vdb-entry, Vendor Advisory, x_refsource_XF)
cve@mitre.org (x_refsource_CISCO, vendor-advisory, Patch, Vendor Advisory)