CVE-2013-6701

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2013-6701

5.0 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact PARTIAL

T

he tNetTaskLimit process on the Transport Node Controller (TNC) on Cisco ONS 15454 devices with software 9.6 and earlier does not properly prioritize health pings, which allows remote attackers to cause a denial of service (watchdog timeout and TNC reset) via a flood of network traffic, aka Bug ID CSCud97155.

References
Link Resource
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6701 Vendor Advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=32200 Vendor Advisory
http://www.securitytracker.com/id/1029512 Third Party Advisory VDB Entry
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6701 Vendor Advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=32200 Vendor Advisory
http://www.securitytracker.com/id/1029512 Third Party Advisory VDB Entry
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:o:cisco:cisco_ons_15454_system_software:9.0:*:*:*:*:*:*:*
cpe:2.3:o:cisco:cisco_ons_15454_system_software:9.1:*:*:*:*:*:*:*
cpe:2.3:o:cisco:cisco_ons_15454_system_software:9.2:*:*:*:*:*:*:*
cpe:2.3:o:cisco:cisco_ons_15454_system_software:9.2.1:*:*:*:*:*:*:*
cpe:2.3:o:cisco:cisco_ons_15454_system_software:9.2.2:*:*:*:*:*:*:*
cpe:2.3:o:cisco:cisco_ons_15454_system_software:9.3:*:*:*:*:*:*:*
cpe:2.3:o:cisco:cisco_ons_15454_system_software:9.4:*:*:*:*:*:*:*
cpe:2.3:o:cisco:cisco_ons_15454_system_software:9.6:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ons_15454_mspp:*:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ons_15454_mstp:*:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ons_15454e_optical_transport_platform:*:*:*:*:*:*:*:*
OR cpe:2.3:h:cisco:ons_15454:*:*:*:*:*:*:*:*
cpe:2.3:h:cisco:ons_15454_multiservice_transport_platform:*:*:*:*:*:*:*:*
cpe:2.3:h:cisco:ons_15454_sdh_multiservice_provisioning_platform:*:*:*:*:*:*:*:*
cpe:2.3:h:cisco:ons_15454_sonet_multiservice_provisioning_platform:*:*:*:*:*:*:*:*
History

21 Nov 2024, 01:59

Type Values Removed Values Added
References () http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6701 - Vendor Advisory () http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6701 - Vendor Advisory
References () http://tools.cisco.com/security/center/viewAlert.x?alertId=32200 - Vendor Advisory () http://tools.cisco.com/security/center/viewAlert.x?alertId=32200 - Vendor Advisory
References () http://www.securitytracker.com/id/1029512 - Third Party Advisory, VDB Entry () http://www.securitytracker.com/id/1029512 - Third Party Advisory, VDB Entry
Information

Published : 2013-12-18 16:04

Updated : 2025-04-11 00:51

NVD link : CVE-2013-6701

Mitre link : CVE-2013-6701

CVE.ORG link : CVE-2013-6701

JSON object : View

Products Affected

cisco

CWE
CWE-20

Improper Input Validation