First published: Fri Dec 31 2004(Updated: )
Multiple versions of Cisco ONS 15327, ONS 15454, and ONS 15454 SDH, including 4.6(0) and 4.6(1), 4.5(x), 4.1(0) to 4.1(3), 4.0(0) to 4.0(2), and earlier versions, and ONS 15600 1.x(x), allows remote attackers to cause a denial of service (control card reset) via malformed (1) TCP and (2) UDP packets.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Cisco Optical Networking systems software | =1.0 | |
Cisco Optical Networking systems software | =1.1 | |
Cisco Optical Networking systems software | =1.1\(0\) | |
Cisco Optical Networking systems software | =1.1\(1\) | |
Cisco Optical Networking systems software | =1.3\(0\) | |
Cisco Optical Networking systems software | =2.3\(5\) | |
Cisco Optical Networking systems software | =3.0 | |
Cisco Optical Networking systems software | =3.1.0 | |
Cisco Optical Networking systems software | =3.2 | |
Cisco Optical Networking systems software | =3.2.0 | |
Cisco Optical Networking systems software | =3.3.0 | |
Cisco Optical Networking systems software | =3.4.0 | |
Cisco Optical Networking systems software | =4.0\(0\) | |
Cisco Optical Networking systems software | =4.0\(1\) | |
Cisco Optical Networking systems software | =4.0\(2\) | |
Cisco Optical Networking systems software | =4.0.0 | |
Cisco Optical Networking systems software | =4.1\(0\) | |
Cisco Optical Networking systems software | =4.1\(1\) | |
Cisco Optical Networking systems software | =4.1\(2\) | |
Cisco Optical Networking systems software | =4.1\(3\) | |
Cisco Optical Networking systems software | =4.5 | |
Cisco Optical Networking systems software | =4.6\(0\) | |
Cisco Optical Networking systems software | =4.6\(1\) |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2004-1433 is classified as a high severity vulnerability due to its potential to cause a denial of service through remote exploitation.
To fix CVE-2004-1433, update the affected Cisco Optical Networking Systems software to the latest version provided by Cisco.
CVE-2004-1433 affects multiple Cisco Optical Networking Systems software versions including 4.6(0), 4.6(1), and earlier versions.
Yes, CVE-2004-1433 can be exploited remotely by sending malformed TCP and UDP packets.
CVE-2004-1433 facilitates a denial of service attack which can result in control card resets on the affected devices.