CVE-2002-1558 Cisco ONS15454 and ONS15327 running ONS before 3.4 have an account for the VxWorks Operating System in the TCC, TCC+ and XTC that cannot be changed or disabled, which allows remote attackers to gain p...
HighCVSS 10.0
EPSS 2.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cisco ONS15454 and ONS15327 running ONS before 3.4 have an account for the VxWorks Operating System in the TCC, TCC+ and XTC that cannot be changed or disabled, which allows remote attackers to gain privileges by connecting to the account via Telnet.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco optical networking systems software | = 3.0 | No fix listed |
| cisco optical networking systems software | = 3.1.0 | No fix listed |
| cisco optical networking systems software | = 3.2 | No fix listed |
| cisco optical networking systems software | = 3.2.0 | No fix listed |
| cisco optical networking systems software | = 3.3.0 | No fix listed |
References
- 20021031 Cisco ONS15454 and Cisco ONS15327 Vulnerabilities patch vendor-advisory
- cisco-ons-default-vsworks-account(10510) patch vdb-entry vendor-advisory
- 6083 patch vdb-entry vendor-advisory