Vulnerability in Cisco Ons 15454 System Software
CVE-2014-2140
Cisco ONS 15454 controller cards with software 9.6 and earlier allow remote attackers to cause a denial of service (card reset) via a TCP FIN attack that triggers file-descriptor exhaustion and a failure to open a CAL pipe, aka Bug ID CSCug97348.
EPSS: 0.018 (76.4th percentile) — read the EPSS interpretation.
Affected products
- Cisco Cisco_ons_15454_system_software — versions 9.0, 9.1, 9.2
- Cisco Ons_15454
- N/a — versions n/a
References
- psirt@cisco.com (x_refsource_CONFIRM, Vendor Advisory)
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)