CVE-2004-1436 The Transaction Language 1 (TL1) login interface in Cisco ONS 15327 4.6(0) and 4.6(1) and 15454 and 15454 SDH 4.6(0) and 4.6(1), when a user account is configured with a blank password, allows remote....
HighCVSS 7.5
EPSS 3.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Transaction Language 1 (TL1) login interface in Cisco ONS 15327 4.6(0) and 4.6(1) and 15454 and 15454 SDH 4.6(0) and 4.6(1), when a user account is configured with a blank password, allows remote attackers to gain unauthorized access by logging in with a password larger than 10 characters.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco optical networking systems software | = 1.0 | No fix listed |
| cisco optical networking systems software | = 1.1 | No fix listed |
| cisco optical networking systems software | = 1.1(0) | No fix listed |
| cisco optical networking systems software | = 1.1(1) | No fix listed |
| cisco optical networking systems software | = 1.3(0) | No fix listed |
| cisco optical networking systems software | = 2.3(5) | No fix listed |
| cisco optical networking systems software | = 3.0 | No fix listed |
| cisco optical networking systems software | = 3.1.0 | No fix listed |
| cisco optical networking systems software | = 3.2 | No fix listed |
| cisco optical networking systems software | = 3.2.0 | No fix listed |
| cisco optical networking systems software | = 3.3.0 | No fix listed |
| cisco optical networking systems software | = 3.4.0 | No fix listed |
| cisco optical networking systems software | = 4.0(0) | No fix listed |
| cisco optical networking systems software | = 4.0(1) | No fix listed |
| cisco optical networking systems software | = 4.0(2) | No fix listed |
| cisco optical networking systems software | = 4.0.0 | No fix listed |
| cisco optical networking systems software | = 4.1(0) | No fix listed |
| cisco optical networking systems software | = 4.1(1) | No fix listed |
| cisco optical networking systems software | = 4.1(2) | No fix listed |
| cisco optical networking systems software | = 4.1(3) | No fix listed |
| cisco optical networking systems software | = 4.5 | No fix listed |
| cisco optical networking systems software | = 4.6(0) | No fix listed |
| cisco optical networking systems software | = 4.6(1) | No fix listed |
References
- 12117 third-party-advisory
- 20040721 Cisco ONS 15327, ONS 15454, ONS 15454 SDH, and ONS 15600 Malformed Packet Vulnerabilities vendor-advisory
- VU#760432 third-party-advisory us-government-resource
- 10768 vdb-entry
- cisco-ons-tl1-auth-bypass(16766) vdb-entry