Vulnerability in Cisco Ons 15454 System Software
CVE-2014-2139
Cisco ONS 15454 controller cards with software 9.6 and earlier allow remote attackers to cause a denial of service (flash write outage) via a TCP FIN attack that triggers file-descriptor exhaustion, aka Bug ID CSCug97315.
EPSS: 0.018 (75.7th percentile) — read the EPSS interpretation.
Affected products
- Cisco Cisco_ons_15454_system_software — versions 9.0, 9.1, 9.2
- Cisco Ons_15454
- N/a — versions n/a
References
- psirt@cisco.com (x_refsource_CONFIRM, Vendor Advisory)
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)