CVE-2006-1670

CWE-399CWE-94 — Code Injection5 documents5 sources
Severity
7.8HIGH
EPSS
1.9%
top 16.66%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Cisco Optical Networking Systems Software
Timeline
PublishedApr 7
Latest updateMay 1

Description

Control cards for Cisco Optical Networking System (ONS) 15000 series nodes before 20060405 allow remote attackers to cause a denial of service (memory exhaustion and possibly card reset) by sending an invalid response when the final ACK is expected, aka bug ID CSCei45910.

CVSS vector

AV:N/AC:L/C:N/I:N/A:CExploitability: 10.0 | Impact: 6.9

Affected Packages1 packages

Patches

Patch: www.cisco.com ↗Patch: www.securityfocus.com ↗Patch: www.cisco.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-f8cr-xgwc-mr3c: Control cards for Cisco Optical Networking System (ONS) 15000 series nodes before 20060405 allow remote attackers to cause a denial of service (memory↗2022-05-01
▶
CVEList
CVE-2006-1670: Control cards for Cisco Optical Networking System (ONS) 15000 series nodes before 20060405 allow remote attackers to cause a denial of service (memory↗2006-04-07
▶

💥Exploits & PoCs

1
Exploit-DB
Microsoft Windows - NetpIsRemote() Remote Overflow (MS06-040) (2)↗2006-08-28
▶

📋Vendor Advisories

1
Cisco
Cisco Optical Networking System 15000 Series and Cisco Transport Controller Vulnerabilities↗2006-04-05
▶
CVE-2006-1670 (HIGH CVSS 7.8) | Control cards for Cisco Optical Net | cvebase.io