Vulnerability Details CVE-2004-1436
The Transaction Language 1 (TL1) login interface in Cisco ONS 15327 4.6(0) and 4.6(1) and 15454 and 15454 SDH 4.6(0) and 4.6(1), when a user account is configured with a blank password, allows remote attackers to gain unauthorized access by logging in with a password larger than 10 characters.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.012
EPSS Ranking 77.7%
CVSS Severity
CVSS v2 Score 7.5
References
- http://secunia.com/advisories/12117
- http://www.cisco.com/warp/public/707/cisco-sa-20040721-ons.shtml
- http://www.kb.cert.org/vuls/id/760432
- http://www.securityfocus.com/bid/10768
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16766
- http://secunia.com/advisories/12117
- http://www.cisco.com/warp/public/707/cisco-sa-20040721-ons.shtml
- http://www.kb.cert.org/vuls/id/760432
- http://www.securityfocus.com/bid/10768
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16766
Products affected by CVE-2004-1436
-
cpe:2.3:a:cisco:optical_networking_systems_software:1.0
-
cpe:2.3:a:cisco:optical_networking_systems_software:1.1
-
cpe:2.3:a:cisco:optical_networking_systems_software:1.1(0)
-
cpe:2.3:a:cisco:optical_networking_systems_software:1.1(1)
-
cpe:2.3:a:cisco:optical_networking_systems_software:1.3(0)
-
cpe:2.3:a:cisco:optical_networking_systems_software:2.3(5)
-
cpe:2.3:a:cisco:optical_networking_systems_software:3.0
-
cpe:2.3:a:cisco:optical_networking_systems_software:3.1.0
-
cpe:2.3:a:cisco:optical_networking_systems_software:3.2
-
cpe:2.3:a:cisco:optical_networking_systems_software:3.2.0
-
cpe:2.3:a:cisco:optical_networking_systems_software:3.3.0
-
cpe:2.3:a:cisco:optical_networking_systems_software:3.4.0
-
cpe:2.3:a:cisco:optical_networking_systems_software:4.0(0)
-
cpe:2.3:a:cisco:optical_networking_systems_software:4.0(1)
-
cpe:2.3:a:cisco:optical_networking_systems_software:4.0(2)
-
cpe:2.3:a:cisco:optical_networking_systems_software:4.0.0
-
cpe:2.3:a:cisco:optical_networking_systems_software:4.1(0)
-
cpe:2.3:a:cisco:optical_networking_systems_software:4.1(1)
-
cpe:2.3:a:cisco:optical_networking_systems_software:4.1(2)
-
cpe:2.3:a:cisco:optical_networking_systems_software:4.1(3)
-
cpe:2.3:a:cisco:optical_networking_systems_software:4.5
-
cpe:2.3:a:cisco:optical_networking_systems_software:4.6(0)
-
cpe:2.3:a:cisco:optical_networking_systems_software:4.6(1)