CVE-2004-0307

3 documents3 sources
Severity
5.0MEDIUM
EPSS
0.8%
top 26.60%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Cisco Optical Networking Systems Software
Timeline
PublishedNov 23
Latest updateApr 29

Description

Cisco ONS 15327 before 4.1(3), ONS 15454 before 4.6(1), and ONS 15454 SD before 4.1(3) allows remote attackers to cause a denial of service (reset) by not sending the ACK portion of the TCP three-way handshake and sending an invalid response instead.

CVSS vector

AV:N/AC:L/C:N/I:N/A:PExploitability: 10.0 | Impact: 2.9

Affected Packages1 packages

Patches

Patch: www.cisco.com ↗Patch: www.securityfocus.com ↗Patch: www.cisco.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-793j-ggmw-r33w: Cisco ONS 15327 before 4↗2022-04-29
▶
CVEList
CVE-2004-0307: Cisco ONS 15327 before 4↗2004-09-01
▶
CVE-2004-0307 (MEDIUM CVSS 5) | Cisco ONS 15327 before 4.1(3) | cvebase.io