MEDIUM · 5.0

CVE-2006-1671

Control cards for Cisco Optical Networking System (ONS) 15000 series nodes before 20060405 allow remote attackers to cause a denial of service (card reset) via (1) a "crafted" IP packet to a device wi...

Vulnerability Description

Control cards for Cisco Optical Networking System (ONS) 15000 series nodes before 20060405 allow remote attackers to cause a denial of service (card reset) via (1) a "crafted" IP packet to a device with secure mode EMS-to-network-element access, aka bug ID CSCsc51390; (2) a "crafted" IP packet to a device with IP on the LAN interface, aka bug ID CSCsd04168; and (3) a "malformed" OSPF packet, aka bug ID CSCsc54558.

CVSS Score

5.0

MEDIUM

AV:N/AC:L/Au:N/C:N/I:N/A:P
Confidentiality
NONE
Integrity
NONE
Availability
PARTIAL

Affected Products

VendorProductVersions
CiscoTransport Controller4.0.x
CiscoOptical Networking Systems Software1.0
CiscoOns 15310-Cl Series0
CiscoOns 156000
CiscoOns 15454 MsppAll versions

References

FAQ

What is CVE-2006-1671?

CVE-2006-1671 is a vulnerability with a CVSS score of 5.0 (MEDIUM). Control cards for Cisco Optical Networking System (ONS) 15000 series nodes before 20060405 allow remote attackers to cause a denial of service (card reset) via (1) a "crafted" IP packet to a device wi...

How severe is CVE-2006-1671?

CVE-2006-1671 has been rated MEDIUM with a CVSS base score of 5.0/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2006-1671?

Check the references section above for vendor advisories and patch information. Affected products include: Cisco Transport Controller, Cisco Optical Networking Systems Software, Cisco Ons 15310-Cl Series, Cisco Ons 15600, Cisco Ons 15454 Mspp.