CVE-2004-1435 Multiple versions of Cisco ONS 15327, ONS 15454, and ONS 15454 SDH, including 4.6(0) and 4.6(1), 4.5(x), 4.1(0) to 4.1(3), 4.0(0) to 4.0(2), and earlier versions, allows remote attackers to cause a de...
MediumCVSS 5.0
EPSS 3.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple versions of Cisco ONS 15327, ONS 15454, and ONS 15454 SDH, including 4.6(0) and 4.6(1), 4.5(x), 4.1(0) to 4.1(3), 4.0(0) to 4.0(2), and earlier versions, allows remote attackers to cause a denial of service (control card reset) via a large number of TCP connections with an invalid response instead of the final ACK (TCP-ACK).
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco optical networking systems software | = 1.0 | No fix listed |
| cisco optical networking systems software | = 1.1 | No fix listed |
| cisco optical networking systems software | = 1.1(0) | No fix listed |
| cisco optical networking systems software | = 1.1(1) | No fix listed |
| cisco optical networking systems software | = 1.3(0) | No fix listed |
| cisco optical networking systems software | = 2.3(5) | No fix listed |
| cisco optical networking systems software | = 3.0 | No fix listed |
| cisco optical networking systems software | = 3.1.0 | No fix listed |
| cisco optical networking systems software | = 3.2 | No fix listed |
| cisco optical networking systems software | = 3.2.0 | No fix listed |
| cisco optical networking systems software | = 3.3.0 | No fix listed |
| cisco optical networking systems software | = 3.4.0 | No fix listed |
| cisco optical networking systems software | = 4.0(0) | No fix listed |
| cisco optical networking systems software | = 4.0(1) | No fix listed |
| cisco optical networking systems software | = 4.0(2) | No fix listed |
| cisco optical networking systems software | = 4.0.0 | No fix listed |
| cisco optical networking systems software | = 4.1(0) | No fix listed |
| cisco optical networking systems software | = 4.1(1) | No fix listed |
| cisco optical networking systems software | = 4.1(2) | No fix listed |
| cisco optical networking systems software | = 4.1(3) | No fix listed |
| cisco optical networking systems software | = 4.5 | No fix listed |
| cisco optical networking systems software | = 4.6(0) | No fix listed |
| cisco optical networking systems software | = 4.6(1) | No fix listed |
References
- 12117 third-party-advisory
- 20040721 Cisco ONS 15327, ONS 15454, ONS 15454 SDH, and ONS 15600 Malformed Packet Vulnerabilities vendor-advisory
- VU#277048 third-party-advisory us-government-resource
- 10768 vdb-entry
- cisco-ons-tcp-ack-dos(16763) vdb-entry