CVE-2002-1554

Published: Mar 31, 2003Modified: Apr 16, 2026

4.6

Vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 3.9 / Impact: 6.4

Source: NVD

Description

Cisco ONS15454 and ONS15327 running ONS before 3.4 stores usernames and passwords in cleartext in the image database for the TCC, TCC+ or XTC, which could allow attackers to gain privileges by obtaining the passwords from the image database or a backup.

Affected (5)

Products: Cisco: Optical Networking Systems Software

Cisco

1 product

Optical Networking Systems Software

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Cisco Optical Networking Systems Software	Version 3.0
Cisco Optical Networking Systems Software	Version 3.1.0
Cisco Optical Networking Systems Software	Version 3.2.0
Cisco Optical Networking Systems Software	Version 3.2
Cisco Optical Networking Systems Software	Version 3.3.0