Vulnerability in Cisco Optical Networking Systems Software

CVE-2002-1558

Cisco ONS15454 and ONS15327 running ONS before 3.4 have an account for the VxWorks Operating System in the TCC, TCC+ and XTC that cannot be changed or disabled, which allows remote attackers to gain privileges by connecting to the account via Telnet.

EPSS: 0.028 (84.9th percentile) — read the EPSS interpretation.

Affected products

Cisco Optical_networking_systems_software — versions 3.0, 3.1.0, 3.2
N/a — versions n/a

References

cve@mitre.org (Patch, vdb-entry, Vendor Advisory, x_refsource_XF)
cve@mitre.org (Patch, vdb-entry, x_refsource_BID, Vendor Advisory)
cve@mitre.org (x_refsource_CISCO, vendor-advisory, Patch, Vendor Advisory)