CVE-2014-2139

Published: Apr 12, 2014Modified: May 6, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Cisco ONS 15454 controller cards with software 9.6 and earlier allow remote attackers to cause a denial of service (flash write outage) via a TCP FIN attack that triggers file-descriptor exhaustion, aka Bug ID CSCug97315.

Affected (9)

Products: Cisco: Cisco Ons 15454 System Software, Ons 15454

Cisco

2 products

Cisco Ons 15454 System Software

Ons 15454

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Cisco Cisco Ons 15454 System Software	Up to 9.6
Cisco Cisco Ons 15454 System Software	Version 9.0
Cisco Cisco Ons 15454 System Software	Version 9.1
Cisco Cisco Ons 15454 System Software	Version 9.2.1
Cisco Cisco Ons 15454 System Software	Version 9.2.2
Cisco Cisco Ons 15454 System Software	Version 9.2
Cisco Cisco Ons 15454 System Software	Version 9.3
Cisco Cisco Ons 15454 System Software	Version 9.4
Cisco Ons 15454	All versions

References (4)

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2139

Source: psirt@cisco.com

Vendor Advisory

http://tools.cisco.com/security/center/viewAlert.x?alertId=33681

Source: psirt@cisco.com

Vendor Advisory

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2139

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://tools.cisco.com/security/center/viewAlert.x?alertId=33681

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.