CVE-2008-3818

Cisco ONS 15310-CL, 15310-MA, 15327, 15454, 15454 SDH, and 15600 with software 7.0.2 through 7.0.6, 7.2.2, 8.0.x, 8.5.1, and 8.5.2 allows remote attackers to cause a denial of service (control-card reset) via a crafted TCP session.

CVSS v2.0 7.8 HIGH

7.8^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:N/I:N/A:C

Exploitability : 10.0 / Impact : 6.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact COMPLETE

References

Link	Resource
http://securitytracker.com/id?1021592
http://www.cisco.com/en/US/products/products_security_advisory09186a0080a5c4fa.shtml	Vendor Advisory
http://www.securityfocus.com/bid/33261
http://www.vupen.com/english/advisories/2009/0139
https://exchange.xforce.ibmcloud.com/vulnerabilities/47940

Configurations

Configuration 1 (hide)

AND

OR	cpe:2.3:a:cisco:ons:7.0.2:::::::*
	cpe:2.3:a:cisco:ons:7.0.4:::::::*
	cpe:2.3:a:cisco:ons:7.0.5:::::::*
	cpe:2.3:a:cisco:ons:7.2.0:::::::*
	cpe:2.3:a:cisco:ons:7.2.2:::::::*
	cpe:2.3:a:cisco:ons:8.0:::::::*
	cpe:2.3:a:cisco:ons:8.5.0:::::::*
	cpe:2.3:a:cisco:ons:8.5.1:::::::*
	cpe:2.3:a:cisco:ons:8.5.2:::::::*

OR	cpe:2.3:h:cisco:ons_15310-cl::::::::
	cpe:2.3:h:cisco:ons_15310-ma::::::::
	cpe:2.3:h:cisco:ons_15327::::::::
	cpe:2.3:h:cisco:ons_15454::::::::
	cpe:2.3:h:cisco:ons_15454sdh::::::::
	cpe:2.3:h:cisco:ons_15600::::::::

History

No history.

Information

Published : 2009-01-16 21:30

Updated : 2023-12-10 10:51

NVD link : CVE-2008-3818

Mitre link : CVE-2008-3818

CVE.ORG link : CVE-2008-3818

JSON object : View

Products Affected

cisco

ons_15310-ma
ons_15454sdh
ons
ons_15327
ons_15310-cl
ons_15600
ons_15454

CWE

CWE-20

Improper Input Validation

{"id": "CVE-2008-3818", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 6.9, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2009-01-16T21:30:00.187", "references": [{"url": "http://securitytracker.com/id?1021592", "source": "ykramarz@cisco.com"}, {"url": "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a5c4fa.shtml", "tags": ["Vendor Advisory"], "source": "ykramarz@cisco.com"}, {"url": "http://www.securityfocus.com/bid/33261", "source": "ykramarz@cisco.com"}, {"url": "http://www.vupen.com/english/advisories/2009/0139", "source": "ykramarz@cisco.com"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/47940", "source": "ykramarz@cisco.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-20"}]}], "descriptions": [{"lang": "en", "value": "Cisco ONS 15310-CL, 15310-MA, 15327, 15454, 15454 SDH, and 15600 with software 7.0.2 through 7.0.6, 7.2.2, 8.0.x, 8.5.1, and 8.5.2 allows remote attackers to cause a denial of service (control-card reset) via a crafted TCP session."}, {"lang": "es", "value": "Cisco ONS 15310-CL, 15310-MA, 15327, 15454, 15454 SDH, y 15600 con software v7.0.2 hasta v7.0.6, v7.2.2, v8.0.x, v8.5.1, y v8.5.2 permite a atacantes remotos causar una denegaci\u00f3n de servicio (reinicio de tarjeta de control) mediante una sesi\u00f3n TCP manipulada."}], "lastModified": "2017-08-08T01:32:11.387", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:cisco:ons:7.0.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1A4A568B-304B-4523-9441-1179D372BA83"}, {"criteria": "cpe:2.3:a:cisco:ons:7.0.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5DCC483E-B58E-403C-8080-FB0B0DCB777F"}, {"criteria": "cpe:2.3:a:cisco:ons:7.0.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "37416556-05E2-48F8-ABED-038459B0FBA5"}, {"criteria": "cpe:2.3:a:cisco:ons:7.2.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6D2E8DD7-5086-4073-990B-5F5D92FAEF33"}, {"criteria": "cpe:2.3:a:cisco:ons:7.2.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1449B3C0-A485-4E8A-8337-64C1E85596E6"}, {"criteria": "cpe:2.3:a:cisco:ons:8.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "682C2AF5-EB85-437B-A147-5CB92610A8C3"}, {"criteria": "cpe:2.3:a:cisco:ons:8.5.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "49A99E5A-6190-458F-9191-5CEA774F121C"}, {"criteria": "cpe:2.3:a:cisco:ons:8.5.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3EE6182B-2A77-47B1-AB8A-8E12C2CD905E"}, {"criteria": "cpe:2.3:a:cisco:ons:8.5.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "62992D9B-8D46-436A-B115-F7B687A24776"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:cisco:ons_15310-cl:*:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "67D1F3C9-85A5-44F9-8198-28FFDF87A3C0"}, {"criteria": "cpe:2.3:h:cisco:ons_15310-ma:*:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "3769407E-D311-45DF-86D7-46098F5B6C36"}, {"criteria": "cpe:2.3:h:cisco:ons_15327:*:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "6F98E52B-161E-41B7-BCFD-EA6E53FA23B4"}, {"criteria": "cpe:2.3:h:cisco:ons_15454:*:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "054BA906-B607-4A65-A6E3-D3D7F8096235"}, {"criteria": "cpe:2.3:h:cisco:ons_15454sdh:*:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "8FE53BD6-BE23-40A5-BE4E-62B3088EC8B8"}, {"criteria": "cpe:2.3:h:cisco:ons_15600:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "811149AD-89DC-4D93-A598-F6318C9EA64B"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "ykramarz@cisco.com"}