CVE-2004-0306

published 2004-11-23

CVE-2004-0306: Cisco ONS 15327 before 4.1(3), ONS 15454 before 4.6(1), ONS 15454 SD before 4.1(3), and Cisco ONS 15600 before 1.3(0) enable TFTP service on UDP port 69 by…

Priority P4 22 medium 5 CVSS 2.0

AV N AC L Au N C N I P A N

Cisco ONS 15327 before 4.1(3), ONS 15454 before 4.6(1), ONS 15454 SD before 4.1(3), and Cisco ONS 15600 before 1.3(0) enable TFTP service on UDP port 69 by default, which allows remote attackers to GET or PUT ONS system files on the current active TCC in the /flash0 or /flash1 directories.

Affected

10 ranges

Vendor	Product	Version range	Fixed in
cisco	optical_networking_systems_software	—	—
cisco	optical_networking_systems_software	—	—
cisco	optical_networking_systems_software	—	—
cisco	optical_networking_systems_software	—	—
cisco	optical_networking_systems_software	—	—
cisco	optical_networking_systems_software	—	—
cisco	optical_networking_systems_software	—	—
cisco	optical_networking_systems_software	—	—
cisco	optical_networking_systems_software	—	—
cisco	optical_networking_systems_software	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.