CVE-2002-0952 describes a denial-of-service vulnerability affecting Cisco ONS 15454 optical transport platforms running ONS software versions 3.1.0 to 3.2.0. An unauthenticated remote attacker can trigger a system reset by sending IP packets with non-zero Type of Service (TOS) bits to the Timing Control Card (TCC) LAN interface. This vulnerability has a CVSS score of 5.0, indicating a medium severity, with a network attack vector and low attack complexity, leading to partial availability impact. There is no evidence of active exploitation, and no public exploit code is available in Metasploit, Nuclei, or ExploitDB. Despite its age, the CVE has received a notable amount of community discussion, with 10 mentions.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
3.1.0CPE matchmatch criteria | cpe:2.3:a:cisco:optical_networking_systems_software:3.1.0:*:*:*:*:*:*:* | ||
3.2.0CPE matchmatch criteria | cpe:2.3:a:cisco:optical_networking_systems_software:3.2.0:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:L/Au:N/C:N/I:N/A:P
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.