CVE-2002-1554
published 2003-03-31CVE-2002-1554: Cisco ONS15454 and ONS15327 running ONS before 3.4 stores usernames and passwords in cleartext in the image database for the TCC, TCC+ or XTC, which could…
PriorityP414medium4.6CVSS 2.0
AVLACLAuNCPIPAP
EPSS
0.36%
27.8th percentile
Cisco ONS15454 and ONS15327 running ONS before 3.4 stores usernames and passwords in cleartext in the image database for the TCC, TCC+ or XTC, which could allow attackers to gain privileges by obtaining the passwords from the image database or a backup.
Affected
5 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | optical_networking_systems_software | — | — |
| cisco | optical_networking_systems_software | — | — |
| cisco | optical_networking_systems_software | — | — |
| cisco | optical_networking_systems_software | — | — |
| cisco | optical_networking_systems_software | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://www.cisco.com/warp/public/707/ons-multiple-vuln-pub.shtmlhttp://www.iss.net/security_center/static/10506.phphttp://www.securityfocus.com/bid/6078http://www.cisco.com/warp/public/707/ons-multiple-vuln-pub.shtmlhttp://www.iss.net/security_center/static/10506.phphttp://www.securityfocus.com/bid/6078
2003-03-31
Published