CVE-2002-1553

Опубликовано: 31 мар. 2003

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

Cisco ONS15454 and ONS15327 running ONS before 3.4 allows remote attackers to modify the system configuration and delete files by establishing an FTP connection to the TCC, TCC+ or XTC using a username and password that does not exist.

Ссылки

http://www.cisco.com/warp/public/707/ons-multiple-vuln-pub.shtml
Patch
Vendor Advisory
http://www.iss.net/security_center/static/10505.php
Patch
Vendor Advisory
http://www.securityfocus.com/bid/6076
Patch
Vendor Advisory
http://www.cisco.com/warp/public/707/ons-multiple-vuln-pub.shtml
Patch
Vendor Advisory
http://www.iss.net/security_center/static/10505.php
Patch
Vendor Advisory
http://www.securityfocus.com/bid/6076
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:cisco:optical_networking_systems_software:3.0:*:*:*:*:*:*:*

cpe:2.3:a:cisco:optical_networking_systems_software:3.1.0:*:*:*:*:*:*:*

cpe:2.3:a:cisco:optical_networking_systems_software:3.2:*:*:*:*:*:*:*

cpe:2.3:a:cisco:optical_networking_systems_software:3.2.0:*:*:*:*:*:*:*

cpe:2.3:a:cisco:optical_networking_systems_software:3.3.0:*:*:*:*:*:*:*

EPSS

Процентиль: 72%

0.00741

Низкий

7.5 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-cr5q-mgrc-j4qj

github

почти 4 года назад