CVE-2002-1553 Cisco ONS15454 and ONS15327 running ONS before 3.4 allows remote attackers to modify the system configuration and delete files by establishing an FTP connection to the TCC, TCC+ or XTC using a usernam...
HighCVSS 7.5
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cisco ONS15454 and ONS15327 running ONS before 3.4 allows remote attackers to modify the system configuration and delete files by establishing an FTP connection to the TCC, TCC+ or XTC using a username and password that does not exist.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco optical networking systems software | = 3.0 | No fix listed |
| cisco optical networking systems software | = 3.1.0 | No fix listed |
| cisco optical networking systems software | = 3.2 | No fix listed |
| cisco optical networking systems software | = 3.2.0 | No fix listed |
| cisco optical networking systems software | = 3.3.0 | No fix listed |
References
- 20021031 Cisco ONS15454 and Cisco ONS15327 Vulnerabilities patch vendor-advisory
- cisco-ons-ftp-no-account(10505) patch vdb-entry vendor-advisory
- 6076 patch vdb-entry vendor-advisory