CVE-2004-1436

The Transaction Language 1 (TL1) login interface in Cisco ONS 15327 4.6(0) and 4.6(1) and 15454 and 15454 SDH 4.6(0) and 4.6(1), when a user account is configured with a blank password, allows remote attackers to gain unauthorized access by logging in with a password larger than 10 characters.

Published: Dec 31, 2004
Updated: Apr 13, 2023
CVE: CVE-2004-1436
Severity: High
Exploit:

CVSS v2:

Severity: High
Score: 7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P

No CWE or OWASP classifications available.

Affected Software
References

Software	From	Fixed in
cisco / optical_networking_systems_software	3.2	3.2.x
cisco / optical_networking_systems_software	3.3.0	3.3.0.x
cisco / optical_networking_systems_software	3.4.0	3.4.0.x
cisco / optical_networking_systems_software	4.0.0	4.0.0.x
cisco / optical_networking_systems_software	3.1.0	3.1.0.x
cisco / optical_networking_systems_software	3.2.0	3.2.0.x
cisco / optical_networking_systems_software	4.6(1)	4.6(1).x
cisco / optical_networking_systems_software	2.3(5)	2.3(5).x
cisco / optical_networking_systems_software	1.0	1.0.x
cisco / optical_networking_systems_software	1.1	1.1.x
cisco / optical_networking_systems_software	1.1(0)	1.1(0).x
cisco / optical_networking_systems_software	1.1(1)	1.1(1).x
cisco / optical_networking_systems_software	4.1(2)	4.1(2).x
cisco / optical_networking_systems_software	4.1(3)	4.1(3).x
cisco / optical_networking_systems_software	4.6(0)	4.6(0).x
cisco / optical_networking_systems_software	4.0(2)	4.0(2).x
cisco / optical_networking_systems_software	4.1(0)	4.1(0).x
cisco / optical_networking_systems_software	4.1(1)	4.1(1).x
cisco / optical_networking_systems_software	4.0(1)	4.0(1).x
cisco / optical_networking_systems_software	4.5	4.5.x
cisco / optical_networking_systems_software	4.0(0)	4.0(0).x
cisco / optical_networking_systems_software	1.3(0)	1.3(0).x
cisco / optical_networking_systems_software	3.0	3.0.x

Vulnerability Database

289,599

CVE-2004-1436