CVE-2014-2140

Published: Apr 12, 2014Modified: May 6, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Cisco ONS 15454 controller cards with software 9.6 and earlier allow remote attackers to cause a denial of service (card reset) via a TCP FIN attack that triggers file-descriptor exhaustion and a failure to open a CAL pipe, aka Bug ID CSCug97348.

Affected (9)

Products: Cisco: Cisco Ons 15454 System Software, Ons 15454

Cisco

2 products

Cisco Ons 15454 System Software

Ons 15454

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Cisco Cisco Ons 15454 System Software	Up to 9.6
Cisco Cisco Ons 15454 System Software	Version 9.0
Cisco Cisco Ons 15454 System Software	Version 9.1
Cisco Cisco Ons 15454 System Software	Version 9.2.1
Cisco Cisco Ons 15454 System Software	Version 9.2.2
Cisco Cisco Ons 15454 System Software	Version 9.2
Cisco Cisco Ons 15454 System Software	Version 9.3
Cisco Cisco Ons 15454 System Software	Version 9.4
Cisco Ons 15454	All versions

References (4)

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2140

Source: psirt@cisco.com

Vendor Advisory

http://tools.cisco.com/security/center/viewAlert.x?alertId=33680

Source: psirt@cisco.com

Vendor Advisory

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2140

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://tools.cisco.com/security/center/viewAlert.x?alertId=33680

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.