CVE-2014-2139

Cisco ONS 15454 controller cards with software 9.6 and earlier allow remote attackers to cause a denial of service (flash write outage) via a TCP FIN attack that triggers file-descriptor exhaustion, aka Bug ID CSCug97315.

Published: Apr 12, 2014
Updated: Apr 13, 2023
CVE: CVE-2014-2139
Severity: Medium
Exploit:

CVSS v2:

Severity: Medium
Score: 5
AV:N/AC:L/Au:N/C:N/I:N/A:P

No CWE or OWASP classifications available.

Affected Software
References

Software	From	Fixed in
cisco / cisco_ons_15454_system_software	-	9.6.x
cisco / cisco_ons_15454_system_software	9.0	9.0.x
cisco / cisco_ons_15454_system_software	9.1	9.1.x
cisco / cisco_ons_15454_system_software	9.2	9.2.x
cisco / cisco_ons_15454_system_software	9.2.1	9.2.1.x
cisco / cisco_ons_15454_system_software	9.2.2	9.2.2.x
cisco / cisco_ons_15454_system_software	9.3	9.3.x
cisco / cisco_ons_15454_system_software	9.4	9.4.x
cisco / ons_15454	-	-

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2139
http://tools.cisco.com/security/center/viewAlert.x?alertId=33681

Vulnerability Database

289,784

CVE-2014-2139