CVE-2004-0306
Severity Score
5.0
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Cisco ONS 15327 before 4.1(3), ONS 15454 before 4.6(1), ONS 15454 SD before 4.1(3), and Cisco ONS 15600 before 1.3(0) enable TFTP service on UDP port 69 by default, which allows remote attackers to GET or PUT ONS system files on the current active TCC in the /flash0 or /flash1 directories.
Cisco ONS 15327 anteriores a 4.1(3), ONS 15454 anteriores a 4.6(1), ONS 15454 SD anteriores a 4.1(3), y Cisco ONS 15600 anteriores a 1.3(0) tienen activo el servicio TFTP en el puerto UDP 69 por defecto, lo que permite a atacantes remotos obtener (GET) o poner (PUT ON) ficheros de sistema en TCC activo acual en los directorios /flash0 y /flash1.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2004-03-17 CVE Reserved
- 2004-09-01 CVE Published
- 2023-08-09 EPSS Updated
- 2024-08-08 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
CAPEC
References (3)
| URL | Tag | Source |
|---|---|---|
| https://exchange.xforce.ibmcloud.com/vulnerabilities/15264 | Vdb Entry |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://www.cisco.com/warp/public/707/cisco-sa-20040219-ONS.shtml | 2018-10-30 | |
| http://www.securityfocus.com/bid/9699 | 2018-10-30 |
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Cisco Search vendor "Cisco" | Optical Networking Systems Software Search vendor "Cisco" for product "Optical Networking Systems Software" | 1.0 Search vendor "Cisco" for product "Optical Networking Systems Software" and version "1.0" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Optical Networking Systems Software Search vendor "Cisco" for product "Optical Networking Systems Software" | 4.0\(1\) Search vendor "Cisco" for product "Optical Networking Systems Software" and version "4.0\(1\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Optical Networking Systems Software Search vendor "Cisco" for product "Optical Networking Systems Software" | 4.0\(2\) Search vendor "Cisco" for product "Optical Networking Systems Software" and version "4.0\(2\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Optical Networking Systems Software Search vendor "Cisco" for product "Optical Networking Systems Software" | 4.0.0 Search vendor "Cisco" for product "Optical Networking Systems Software" and version "4.0.0" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Optical Networking Systems Software Search vendor "Cisco" for product "Optical Networking Systems Software" | 4.1\(0\) Search vendor "Cisco" for product "Optical Networking Systems Software" and version "4.1\(0\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Optical Networking Systems Software Search vendor "Cisco" for product "Optical Networking Systems Software" | 4.1\(1\) Search vendor "Cisco" for product "Optical Networking Systems Software" and version "4.1\(1\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Optical Networking Systems Software Search vendor "Cisco" for product "Optical Networking Systems Software" | 4.1\(2\) Search vendor "Cisco" for product "Optical Networking Systems Software" and version "4.1\(2\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Optical Networking Systems Software Search vendor "Cisco" for product "Optical Networking Systems Software" | 4.1\(3\) Search vendor "Cisco" for product "Optical Networking Systems Software" and version "4.1\(3\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Optical Networking Systems Software Search vendor "Cisco" for product "Optical Networking Systems Software" | 4.1.0 Search vendor "Cisco" for product "Optical Networking Systems Software" and version "4.1.0" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Optical Networking Systems Software Search vendor "Cisco" for product "Optical Networking Systems Software" | 4.5 Search vendor "Cisco" for product "Optical Networking Systems Software" and version "4.5" | - |
Affected
| ||||||