Vulnerability Details CVE-2014-2140
Cisco ONS 15454 controller cards with software 9.6 and earlier allow remote attackers to cause a denial of service (card reset) via a TCP FIN attack that triggers file-descriptor exhaustion and a failure to open a CAL pipe, aka Bug ID CSCug97348.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 60.5%
CVSS Severity
CVSS v2 Score 5.0
References
Products affected by CVE-2014-2140
-
cpe:2.3:h:cisco:ons_15454:-
-
cpe:2.3:o:cisco:cisco_ons_15454_system_software:9.0
-
cpe:2.3:o:cisco:cisco_ons_15454_system_software:9.1
-
cpe:2.3:o:cisco:cisco_ons_15454_system_software:9.2
-
cpe:2.3:o:cisco:cisco_ons_15454_system_software:9.2.1
-
cpe:2.3:o:cisco:cisco_ons_15454_system_software:9.2.2
-
cpe:2.3:o:cisco:cisco_ons_15454_system_software:9.3
-
cpe:2.3:o:cisco:cisco_ons_15454_system_software:9.4
-
cpe:2.3:o:cisco:cisco_ons_15454_system_software:9.6