Unscored CVE-2004-1436 EUVD-2004-1433GHSA-x773-f7wv-p2hw

The Transaction Language 1 (TL1) login interface in Cisco ONS 15327 4.6(0) and 4.6(1) and 15454 and 15454 SDH 4.6(0) and 4.6(1), when a use…

Published Feb 13, 2005 · Updated Aug 8, 2024 · Assigned by mitre

Description

The Transaction Language 1 (TL1) login interface in Cisco ONS 15327 4.6(0) and 4.6(1) and 15454 and 15454 SDH 4.6(0) and 4.6(1), when a user account is configured with a blank password, allows remote attackers to gain unauthorized access by logging in with a password larger than 10 characters.

References

20040721 Cisco ONS 15327, ONS 15454, ONS 15454 SDH, and ONS 15600 Malformed Packet Vulnerabilities vendor-advisory
12117 third-party-advisory
10768 vdb-entry
VU#760432 third-party-advisory
cisco-ons-tl1-auth-bypass(16766) vdb-entry