First published: Thu Mar 18 2004(Updated: )
Unknown vulnerability in Cisco ONS 15327 before 4.1(3), ONS 15454 before 4.6(1), ONS 15454 SD before 4.1(3), and Cisco ONS15600 before 1.3(0) allows a superuser whose account is locked out, disabled, or suspended to gain unauthorized access via a Telnet connection to the VxWorks shell.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Cisco Optical Networking systems software | =4.0.0 | |
Cisco Optical Networking systems software | =1.0 | |
Cisco Optical Networking systems software | =4.1\(2\) | |
Cisco Optical Networking systems software | =4.1\(3\) | |
Cisco Optical Networking systems software | =4.0\(2\) | |
Cisco Optical Networking systems software | =4.1.0 | |
Cisco Optical Networking systems software | =4.1\(0\) | |
Cisco Optical Networking systems software | =4.1\(1\) | |
Cisco Optical Networking systems software | =4.0\(1\) | |
Cisco Optical Networking systems software | =4.5 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2004-0308 is considered a critical vulnerability due to the potential for unauthorized superuser access.
To remediate CVE-2004-0308, update the Cisco Optical Networking Systems Software to a version that is not vulnerable.
CVE-2004-0308 affects Cisco ONS 15327, ONS 15454, ONS 15454 SD, and ONS 15600 prior to specified firmware versions.
CVE-2004-0308 can be exploited to gain unauthorized access to the VxWorks shell via Telnet, bypassing account lockout.
CVE-2004-0308 remains relevant for organizations using unsupported versions of Cisco Optical Networking Systems Software.