« Volver al listado

CVE-2013-6701

Estado: ModificadaMedia (5)—

The tNetTaskLimit process on the Transport Node Controller (TNC) on Cisco ONS 15454 devices with software 9.6 and earlier does not properly prioritize health pings, which allows remote attackers to cause a denial of service (watchdog timeout and TNC reset) via a flood of network traffic, aka Bug ID CSCud97155.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (8)

Cisco — Cisco ONS 15454 System SoftwareCisco — ONS 15454Cisco — ONS 15454 MsppCisco — ONS 15454 MstpCisco — ONS 15454 Multiservice Transport PlatformCisco — ONS 15454 SDH Multiservice Provisioning PlatformCisco — ONS 15454 Sonet Multiservice Provisioning PlatformCisco — ONS 15454e Optical Transport Platform

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2013-6701",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@cisco.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2013-12-18T16:04:34.350",
  "references": [
    {
      "url": "http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6701",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://tools.cisco.com/security/center/viewAlert.x?alertId=32200",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://www.securitytracker.com/id/1029512",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6701",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://tools.cisco.com/security/center/viewAlert.x?alertId=32200",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securitytracker.com/id/1029512",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The tNetTaskLimit process on the Transport Node Controller (TNC) on Cisco ONS 15454 devices with software 9.6 and earlier does not properly prioritize health pings, which allows remote attackers to cause a denial of service (watchdog timeout and TNC reset) via a flood of network traffic, aka Bug ID CSCud97155."
    },
    {
      "lang": "es",
      "value": "El proceso tNetTaskLimit en Transport Node Controller (TNC) en dispositivos Cisco ONS 15454 con software 9.6 y anteriores no prioriza correctamente pings sanitarios, lo cual permite a atacantes remotos causar denegación de servicio (watchdog timeout y reinicio del TNC) a través de inundación del tráfico de red, también conocido como Bug ID CSCud97155."
    }
  ],
  "lastModified": "2026-06-17T00:00:49.480",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:cisco:cisco_ons_15454_system_software:9.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "383BBBEE-F2B8-4CD4-9390-73E536D3C716"
            },
            {
              "criteria": "cpe:2.3:o:cisco:cisco_ons_15454_system_software:9.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AD64656F-0FA2-4F1A-9777-C37686DE9E31"
            },
            {
              "criteria": "cpe:2.3:o:cisco:cisco_ons_15454_system_software:9.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "95EB5962-F6D9-4606-A28B-521CAAA5B696"
            },
            {
              "criteria": "cpe:2.3:o:cisco:cisco_ons_15454_system_software:9.2.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9DAE1275-EC96-4898-96A9-15B00414FB51"
            },
            {
              "criteria": "cpe:2.3:o:cisco:cisco_ons_15454_system_software:9.2.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4C01C932-64BC-48F5-8037-81A58B8DC6F3"
            },
            {
              "criteria": "cpe:2.3:o:cisco:cisco_ons_15454_system_software:9.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3DE3CF6F-1FED-4402-BF98-21C0CBF9FDF5"
            },
            {
              "criteria": "cpe:2.3:o:cisco:cisco_ons_15454_system_software:9.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "97521058-BCB4-4152-B8FA-EF959966A892"
            },
            {
              "criteria": "cpe:2.3:o:cisco:cisco_ons_15454_system_software:9.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C5C0E1C0-BBE2-41CA-9144-B3A35E929BCC"
            },
            {
              "criteria": "cpe:2.3:o:cisco:ons_15454_mspp:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B0E3A7E4-39CD-44B9-B72D-0C9B810A2158"
            },
            {
              "criteria": "cpe:2.3:o:cisco:ons_15454_mstp:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5B98B943-24D6-4B37-A44F-0E3985BBB54E"
            },
            {
              "criteria": "cpe:2.3:o:cisco:ons_15454e_optical_transport_platform:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9442E2B1-6D21-46FC-9782-CD441254EEFB"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:cisco:ons_15454:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "054BA906-B607-4A65-A6E3-D3D7F8096235"
            },
            {
              "criteria": "cpe:2.3:h:cisco:ons_15454_multiservice_transport_platform:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "143ECB17-B9C3-4BBC-A308-D5E8A4E1D75C"
            },
            {
              "criteria": "cpe:2.3:h:cisco:ons_15454_sdh_multiservice_provisioning_platform:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AC82D55D-7565-4E74-9D4A-19BB5F87D067"
            },
            {
              "criteria": "cpe:2.3:h:cisco:ons_15454_sonet_multiservice_provisioning_platform:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4D44F084-DF53-47D4-8E2D-B969528E07EE"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "psirt@cisco.com"
}