Optical Networking Systems Software

Vendor:

First CVE: Oct 4, 2002 · Active for 23 years

20
Total CVEs
More Total CVEs than 94% of tracked products
5.0
Avg CVEs / Year
Higher CVE frequency than 87% of tracked products
6.1
Avg CVSS
Higher Avg CVSS than 24% of tracked products
0.0%
KEV Rate
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Optical Networking Systems Software over time

Volume of CVEsAvg CVSS Base Score
First CVE
Oct 4, 2002
23 years ago
Most Recent CVE
Apr 7, 2006
7,415 days ago

CVE Severity & Scoring

Optical Networking Systems Software20 CVEs
All CVEs352,719 CVEs
MediumHigh
Attack Vector
Local0 (0.0%)
Network0 (0.0%)
Unknown20 (100.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low0 (0.0%)
High0 (0.0%)
Unknown20 (100.0%)
User Interaction
None0 (0.0%)
Unknown20 (100.0%)
Required0 (0.0%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None0 (0.0%)
Unknown20 (100.0%)

Top CVEs

Signals from CVEs in this product scope (20 CVEs).

20 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
Cisco IOS 11.x and 12.0 through 12.2 allows remote attackers to cause a denial of service (traffic block) by sending a particular sequence of IPv4 packets to an interface on the de
Aug 18, 20037.837NOYES
Cisco ONS15454 and ONS15327 running ONS before 3.4 have an account for the VxWorks Operating System in the TCC, TCC+ and XTC that cannot be changed or disabled, which allows remote
Mar 31, 200310.031NONO
Unknown vulnerability in Cisco ONS 15327 before 4.1(3), ONS 15454 before 4.6(1), ONS 15454 SD before 4.1(3), and Cisco ONS15600 before 1.3(0) allows a superuser whose account is lo
Nov 24, 200410.026NONO
The Transaction Language 1 (TL1) login interface in Cisco ONS 15327 4.6(0) and 4.6(1) and 15454 and 15454 SDH 4.6(0) and 4.6(1), when a user account is configured with a blank pass
Dec 31, 20047.525NONO
Control cards for Cisco Optical Networking System (ONS) 15000 series nodes before 20060405 allow remote attackers to cause a denial of service (memory exhaustion and possibly card
Apr 7, 20067.820NONO
The installation of Cisco Transport Controller (CTC) for Cisco Optical Networking System (ONS) 15000 series nodes adds a Java policy file entry with a wildcard that grants the java
Apr 7, 20067.520NONO
Multiple versions of Cisco ONS 15327, ONS 15454, and ONS 15454 SDH, including 4.6(0) and 4.6(1), 4.5(x), 4.1(0) to 4.1(3), 4.0(0) to 4.0(2), and earlier versions, allows remote att
Dec 31, 20045.020NONO
Cisco ONS 15327 before 4.1(3), ONS 15454 before 4.6(1), ONS 15454 SD before 4.1(3), and Cisco ONS 15600 before 1.3(0) enable TFTP service on UDP port 69 by default, which allows re
Nov 23, 20045.019NONO
Cisco ONS 15327 before 4.1(3), ONS 15454 before 4.6(1), and ONS 15454 SD before 4.1(3) allows remote attackers to cause a denial of service (reset) by not sending the ACK portion o
Nov 23, 20045.019NONO
Cisco ONS15454 and ONS15327 running ONS before 3.4 allows remote attackers to modify the system configuration and delete files by establishing an FTP connection to the TCC, TCC+ or
Mar 31, 20037.519NONO

Exploit Exposure

Signals from CVEs in this product scope (20 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
1 CVE
5.0% of CVEs· 88th percentile

Social Chatter

Signals from CVEs in this product scope (20 CVEs).

Media Mentions

Signals from CVEs in this product scope (20 CVEs).

Top CNAs Publishing CVEs For Optical Networking Systems Software

Top CWEs

Versions

VersionCVE CountAvg CVSSAvg EPSSKEVExploits
4.6\(1\)86.03.3%00
4.6\(0\)86.03.3%00
4.585.92.9%00
4.1.436.82.9%00
4.1\(3\)126.12.9%00
4.1\(2\)126.12.9%00
4.1\(1\)126.12.9%00
4.1\(0\)126.12.9%00
4.1.046.32.0%00
4.0\(2\)126.12.9%00
4.0\(1\)126.12.9%00
4.0\(0\)55.53.5%00
4.0.0136.23.9%01
3.4.0106.14.5%01
3.3.0166.13.4%01
3.2.0145.93.4%01
3.2146.12.5%00
3.1.0176.03.3%01
3.0166.13.4%01
2.3\(5\)55.53.5%00