CVE-2013-6701: Input Validation
First published: Wed Dec 18 2013(Updated: )
The tNetTaskLimit process on the Transport Node Controller (TNC) on Cisco ONS 15454 devices with software 9.6 and earlier does not properly prioritize health pings, which allows remote attackers to cause a denial of service (watchdog timeout and TNC reset) via a flood of network traffic, aka Bug ID CSCud97155.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco ONS 15454 firmware | =9.0 | |
| Cisco ONS 15454 firmware | =9.1 | |
| Cisco ONS 15454 firmware | =9.2 | |
| Cisco ONS 15454 firmware | =9.2.1 | |
| Cisco ONS 15454 firmware | =9.2.2 | |
| Cisco ONS 15454 firmware | =9.3 | |
| Cisco ONS 15454 firmware | =9.4 | |
| Cisco ONS 15454 firmware | =9.6 | |
| Cisco ONS 15454 SDH | ||
| Cisco ONS 15454 MSTP Firmware | ||
| Cisco ONS 15454 system software | ||
| Cisco ONS 15454 MSTP | ||
| Cisco ONS 15454 SDH | ||
| Cisco ONS 15454 SDH | ||
| Cisco ONS 15454 Multiservice Transport Platform |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2013-6701?
CVE-2013-6701 is classified as a medium severity vulnerability.
How do I fix CVE-2013-6701?
To fix CVE-2013-6701, upgrade the Cisco ONS 15454 device software to version 9.7 or later.
What devices are affected by CVE-2013-6701?
CVE-2013-6701 affects Cisco ONS 15454 devices running software versions 9.0 to 9.6.
What type of attack does CVE-2013-6701 enable?
CVE-2013-6701 allows remote attackers to cause a denial of service by flooding network traffic.
What is the impact of CVE-2013-6701 on the affected devices?
The impact of CVE-2013-6701 includes potential watchdog timeouts and Transport Node Controller resets.
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/weakness
- agent/description
- agent/references
- agent/last-modified-date
- agent/author
- agent/event
- agent/type
- agent/first-publish-date
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco ons 15454 firmware
- version/cisco ons 15454 firmware/9.0
- version/cisco ons 15454 firmware/9.1
- version/cisco ons 15454 firmware/9.2
- version/cisco ons 15454 firmware/9.2.1
- version/cisco ons 15454 firmware/9.2.2
- version/cisco ons 15454 firmware/9.3
- version/cisco ons 15454 firmware/9.4
- version/cisco ons 15454 firmware/9.6
- canonical/cisco ons 15454 sdh
- canonical/cisco ons 15454 mstp firmware
- canonical/cisco ons 15454 system software
- canonical/cisco ons 15454 mstp
- canonical/cisco ons 15454 multiservice transport platform