Unscored CVE-2002-1558 EUVD-2002-1540GHSA-xf47-834w-q9wp

Cisco ONS15454 and ONS15327 running ONS before 3.4 have an account for the VxWorks Operating System in the TCC, TCC+ and XTC that cannot be…

Published Mar 18, 2003 · Updated Aug 8, 2024 · Assigned by mitre

Description

Cisco ONS15454 and ONS15327 running ONS before 3.4 have an account for the VxWorks Operating System in the TCC, TCC+ and XTC that cannot be changed or disabled, which allows remote attackers to gain privileges by connecting to the account via Telnet.

References

cisco-ons-default-vsworks-account(10510) vdb-entry
6083 vdb-entry
20021031 Cisco ONS15454 and Cisco ONS15327 Vulnerabilities vendor-advisory