CVE-2002-1558

Published: Mar 31, 2003Modified: Apr 16, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

Cisco ONS15454 and ONS15327 running ONS before 3.4 have an account for the VxWorks Operating System in the TCC, TCC+ and XTC that cannot be changed or disabled, which allows remote attackers to gain privileges by connecting to the account via Telnet.

Affected (5)

Products: Cisco: Optical Networking Systems Software

Cisco

1 product

Optical Networking Systems Software

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Cisco Optical Networking Systems Software	Version 3.0
Cisco Optical Networking Systems Software	Version 3.1.0
Cisco Optical Networking Systems Software	Version 3.2.0
Cisco Optical Networking Systems Software	Version 3.2
Cisco Optical Networking Systems Software	Version 3.3.0