CVSS Meta Temp Score | Current Exploit Price (≈) | CTI Interest Score |
---|---|---|
7.2 | $0-$5k | 0.00 |
A vulnerability has been found in Cisco ONS 15216 2.2.2 and classified as critical. This vulnerability affects an unknown function of the component Telnet Handler. The manipulation with an unknown input leads to a denial of service vulnerability. The CWE definition for the vulnerability is CWE-404. The product does not release or incorrectly releases a resource before it is made available for re-use. As an impact it is known to affect availability. CVE summarizes:
Cisco ONS 15216 Optical Add/Drop Multiplexer (OADM) running firmware 2.2.2 and earlier allows remote attackers to cause a denial of service (management plane session loss) via crafted telnet data.
The bug was discovered 07/13/2005. The weakness was shared 07/14/2005 with Cisco (Website). The advisory is shared for download at cisco.com. This vulnerability was named CVE-2005-2279 since 07/17/2005. The attack can be initiated remotely. No form of authentication is required for a successful exploitation. There are neither technical details nor an exploit publicly available. The MITRE ATT&CK project declares the attack technique as T1499.
The vulnerability was handled as a non-public zero-day exploit for at least 1 days. During that time the estimated underground price was around $0-$5k.
Upgrading to version 2.2.3 eliminates this vulnerability. Applying a patch is able to eliminate this problem. The bugfix is ready for download at cisco.com. The best possible mitigation is suggested to be patching the affected component.
Product
Vendor
Name
Version
License
Support
- end of life (old version)
CPE 2.3
CPE 2.2
CVSSv4
VulDB CVSS-B Score: 🔍VulDB CVSS-BT Score: 🔍
VulDB Vector: 🔍
VulDB Reliability: 🔍
CVSSv3
VulDB Meta Base Score: 7.5VulDB Meta Temp Score: 7.2
VulDB Base Score: 7.5
VulDB Temp Score: 7.2
VulDB Vector: 🔍
VulDB Reliability: 🔍
CVSSv2
AV | AC | Au | C | I | A |
---|---|---|---|---|---|
💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
Vector | Complexity | Authentication | Confidentiality | Integrity | Availability |
---|---|---|---|---|---|
unlock | unlock | unlock | unlock | unlock | unlock |
unlock | unlock | unlock | unlock | unlock | unlock |
unlock | unlock | unlock | unlock | unlock | unlock |
VulDB Base Score: 🔍
VulDB Temp Score: 🔍
VulDB Reliability: 🔍
NVD Base Score: 🔍
Exploiting
Class: Denial of serviceCWE: CWE-404
ATT&CK: T1499
Local: No
Remote: Yes
Availability: 🔍
Status: Not defined
EPSS Score: 🔍
EPSS Percentile: 🔍
Price Prediction: 🔍
Current Price Estimation: 🔍
0-Day | unlock | unlock | unlock | unlock |
---|---|---|---|---|
Today | unlock | unlock | unlock | unlock |
Threat Intelligence
Interest: 🔍Active Actors: 🔍
Active APT Groups: 🔍
Countermeasures
Recommended: PatchStatus: 🔍
0-Day Time: 🔍
Upgrade: ONS 15216 2.2.3
Patch: cisco.com
Timeline
07/13/2005 🔍07/13/2005 🔍
07/13/2005 🔍
07/13/2005 🔍
07/14/2005 🔍
07/14/2005 🔍
07/15/2005 🔍
07/17/2005 🔍
07/18/2005 🔍
04/18/2006 🔍
10/09/2020 🔍
Sources
Vendor: cisco.comAdvisory: cisco.com
Researcher: http://www.cisco.com
Organization: Cisco
Status: Confirmed
CVE: CVE-2005-2279 (🔍)
SecurityTracker: 1014475
Vulnerability Center: 11158 - [cisco-sa-20050713-ons] Cisco ONS 15216 OADM DoS via Malicious Telnet Data, Medium
SecurityFocus: 14246 - Cisco ONS 15216 OADM Management Plane Telnet Service Remote Denial Of Service Vulnerability
Secunia: 16073 - Cisco ONS 15216 OADM Telnet Session Denial of Service, Less Critical
OSVDB: 17863 - Cisco ONS 15216 OADM Crafted Telnet Session DoS
Entry
Created: 07/15/2005 16:33Updated: 10/09/2020 10:54
Changes: 07/15/2005 16:33 (73), 07/03/2019 16:38 (7), 10/09/2020 10:54 (1)
Complete: 🔍
No comments yet. Languages: en.
Please log in to comment.