Vulnerabilities > CVE-2006-1670 - Multiple vulnerability in Cisco Optical Networking System and Transport Controller

CVSS 7.8 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

COMPLETE

network

low complexity

cisco

NVD

Published: 2006-04-07

Updated: 2018-10-30

Summary

Control cards for Cisco Optical Networking System (ONS) 15000 series nodes before 20060405 allow remote attackers to cause a denial of service (memory exhaustion and possibly card reset) by sending an invalid response when the final ACK is expected, aka bug ID CSCei45910.

Vulnerable Configurations

Part	Description	Count
Application	Cisco Cisco Optical Networking Systems Software 1.0 Cisco Optical Networking Systems Software 1.1 Cisco Optical Networking Systems Software 1.1\(0\) Cisco Optical Networking Systems Software 1.1\(1\) Cisco Optical Networking Systems Software 1.3\(0\) Cisco Optical Networking Systems Software 3.0 Cisco Optical Networking Systems Software 3.1.0 Cisco Optical Networking Systems Software 3.2 Cisco Optical Networking Systems Software 3.3.0 Cisco Optical Networking Systems Software 3.4.0 Cisco Optical Networking Systems Software 4.0\(1\) Cisco Optical Networking Systems Software 4.0\(2\) Cisco Optical Networking Systems Software 4.0.0 Cisco Optical Networking Systems Software 4.1\(0\) Cisco Optical Networking Systems Software 4.1\(1\) Cisco Optical Networking Systems Software 4.1\(2\) Cisco Optical Networking Systems Software 4.1\(3\) Cisco Optical Networking Systems Software 4.1.4 Cisco Optical Networking Systems Software 4.6\(0\) Cisco Optical Networking Systems Software 4.6\(1\)	20
Hardware	Cisco Cisco ONS 15310 CL Series * Cisco ONS 15600 *	2
OS	Cisco Cisco ONS 15454 Mspp * Cisco ONS 15454 Mstp *	2

Summary

Vulnerable Configurations

References