Improper input validation in Cisco Ons 15454 System Software
CVE-2013-6701
The tNetTaskLimit process on the Transport Node Controller (TNC) on Cisco ONS 15454 devices with software 9.6 and earlier does not properly prioritize health pings, which allows remote attackers to cause a denial of service (watchdog timeout and TNC reset) via a flood of network traffic, aka Bug ID CSCud97155.
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
Published · last modified .
CVSS v2 metric
CVSS v2 base score 5.0 (Medium). Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P. This CVE predates CVSS v3 and has no v3 score from NVD.
EPSS exploit prediction
EPSS: 0.019 (78.4th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 78th percentile — 78.4% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.019 · newest: 0.019 · change: 0.000
Affected products
- Cisco Ons 15454 System Software — versions 9.0, 9.1, 9.2
- Cisco Ons 15454
- Cisco Ons 15454e Optical Transport Platform
- Cisco Ons 15454 Mspp
- Cisco Ons 15454 Mstp
- Cisco Ons 15454 Multiservice Transport Platform
- Cisco Ons 15454 Sdh Multiservice Provisioning Platform
- Cisco Ons 15454 Sonet Multiservice Provisioning Platform
Weakness classification (CWE)
References
- www.securitytracker.com/id/1029512 (VDB Entry, Third Party Advisory, vdb-entry)
- tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6701 (vendor-advisory, Vendor Advisory)
- tools.cisco.com/security/center/viewAlert.x (Vendor Advisory)