Cisco Optical Networking Systems Software (ONS) 4.0.0
Approved changes feed: RSS · Atom
cpe:2.3:a:cisco:optical_networking_systems_software:4.0.0:*:*:*:*:*:*:*
part: a version: 4.0.0 update: *
| Vendor | Cisco (e1b3baff-aaf9-56a6-a68a-41e28ce616a5) |
|---|---|
| Product | Optical Networking Systems Software (161da993-5c55-503a-a224-ff746675660c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2006-1672 |
vulnerable | 2026-06-08 04:48:57.771949 |
Details available
The installation of Cisco Transport Controller (CTC) for Cisco Optical Networking System (ONS) 15000 series nodes adds a Java policy file entry with a wildcard that grants the java.security.AllPermission permission to any http URL containing "fs/LAUNCHER.jar", which allows remote attackers to execute arbitrary code on a CTC workstation, aka bug ID CSCea25049.
Published: 2006-04-07T10:00:00.000Z
Updated: 2024-08-07T17:19:49.267Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-1671 |
vulnerable | 2026-06-08 04:48:57.767676 |
Details available
Control cards for Cisco Optical Networking System (ONS) 15000 series nodes before 20060405 allow remote attackers to cause a denial of service (card reset) via (1) a "crafted" IP packet to a device with secure mode EMS-to-network-element access, aka bug ID CSCsc51390; (2) a "crafted" IP packet to a device with IP on the LAN interface, aka bug ID CSCsd04168; and (3) a "malformed" OSPF packet, aka bug ID CSCsc54558.
Published: 2006-04-07T10:00:00.000Z
Updated: 2024-08-07T17:19:49.275Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-1670 |
vulnerable | 2026-06-08 04:48:57.760278 |
Details available
Control cards for Cisco Optical Networking System (ONS) 15000 series nodes before 20060405 allow remote attackers to cause a denial of service (memory exhaustion and possibly card reset) by sending an invalid response when the final ACK is expected, aka bug ID CSCei45910.
Published: 2006-04-07T10:00:00.000Z
Updated: 2024-08-07T17:19:49.448Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2004-1436 |
vulnerable | 2026-06-08 04:47:54.064600 |
Details available
The Transaction Language 1 (TL1) login interface in Cisco ONS 15327 4.6(0) and 4.6(1) and 15454 and 15454 SDH 4.6(0) and 4.6(1), when a user account is configured with a blank password, allows remote attackers to gain unauthorized access by logging in with a password larger than 10 characters.
Published: 2005-02-13T05:00:00.000Z
Updated: 2024-08-08T00:53:24.061Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2004-1435 |
vulnerable | 2026-06-08 04:47:54.063825 |
Details available
Multiple versions of Cisco ONS 15327, ONS 15454, and ONS 15454 SDH, including 4.6(0) and 4.6(1), 4.5(x), 4.1(0) to 4.1(3), 4.0(0) to 4.0(2), and earlier versions, allows remote attackers to cause a denial of service (control card reset) via a large number of TCP connections with an invalid response instead of the final ACK (TCP-ACK).
Published: 2005-02-13T05:00:00.000Z
Updated: 2024-08-08T00:53:23.598Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2004-1434 |
vulnerable | 2026-06-08 04:47:54.062666 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2004-1433 |
vulnerable | 2026-06-08 04:47:54.061894 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2004-1432 |
vulnerable | 2026-06-08 04:47:54.059280 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2004-0714 |
vulnerable | 2026-06-08 04:47:50.992675 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2004-0308 |
vulnerable | 2026-06-08 04:47:49.357304 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2004-0307 |
vulnerable | 2026-06-08 04:47:49.356768 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2004-0306 |
vulnerable | 2026-06-08 04:47:49.352830 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2003-0567 |
vulnerable | 2026-06-08 04:47:21.905681 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.