CVE-2014-2140
Published Apr 12, 2014
Last updated 11 years ago
Overview
- Description
- Cisco ONS 15454 controller cards with software 9.6 and earlier allow remote attackers to cause a denial of service (card reset) via a TCP FIN attack that triggers file-descriptor exhaustion and a failure to open a CAL pipe, aka Bug ID CSCug97348.
- Source
- ykramarz@cisco.com
- NVD status
- Analyzed
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 5
- Impact score
- 2.9
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:N/I:N/A:P
Weaknesses
- nvd@nist.gov
- NVD-CWE-noinfo
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:cisco_ons_15454_system_software:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A4C445CA-51E4-45F7-873B-2A1DC2734F8F",
"versionEndIncluding": "9.6"
},
{
"criteria": "cpe:2.3:o:cisco:cisco_ons_15454_system_software:9.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "383BBBEE-F2B8-4CD4-9390-73E536D3C716"
},
{
"criteria": "cpe:2.3:o:cisco:cisco_ons_15454_system_software:9.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AD64656F-0FA2-4F1A-9777-C37686DE9E31"
},
{
"criteria": "cpe:2.3:o:cisco:cisco_ons_15454_system_software:9.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "95EB5962-F6D9-4606-A28B-521CAAA5B696"
},
{
"criteria": "cpe:2.3:o:cisco:cisco_ons_15454_system_software:9.2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9DAE1275-EC96-4898-96A9-15B00414FB51"
},
{
"criteria": "cpe:2.3:o:cisco:cisco_ons_15454_system_software:9.2.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4C01C932-64BC-48F5-8037-81A58B8DC6F3"
},
{
"criteria": "cpe:2.3:o:cisco:cisco_ons_15454_system_software:9.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3DE3CF6F-1FED-4402-BF98-21C0CBF9FDF5"
},
{
"criteria": "cpe:2.3:o:cisco:cisco_ons_15454_system_software:9.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "97521058-BCB4-4152-B8FA-EF959966A892"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:ons_15454:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "054BA906-B607-4A65-A6E3-D3D7F8096235"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
]