« Volver al listado

CVE-2014-2141

Estado: ModificadaMedia (4)—

The session-termination functionality on Cisco ONS 15454 controller cards with software 9.6 and earlier does not initialize an unspecified pointer, which allows remote authenticated users to cause a denial of service (card reset) via crafted session-close actions, aka Bug ID CSCug97416.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

Cisco — Cisco ONS 15454 System SoftwareCisco — ONS 15454

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2014-2141",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:S/C:N/I:N/A:P",
          "authentication": "SINGLE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@cisco.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2014-04-10T04:34:51.053",
  "references": [
    {
      "url": "http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2141",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://tools.cisco.com/security/center/viewAlert.x?alertId=33682",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2141",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://tools.cisco.com/security/center/viewAlert.x?alertId=33682",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-119"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The session-termination functionality on Cisco ONS 15454 controller cards with software 9.6 and earlier does not initialize an unspecified pointer, which allows remote authenticated users to cause a denial of service (card reset) via crafted session-close actions, aka Bug ID CSCug97416."
    },
    {
      "lang": "es",
      "value": "La funcionalidad de terminación de sesión en las tarjetas de controlador de Cisco ONS 15454 con software 9.6 y anteriores no inicializa un puntero no especificado, lo que permite a usuarios remotos autenticados causar una denegación de servicio (reinicio de tarjeta) a través de acciones de cierre de sesión manipuladas, también conocido como Bug ID CSCug97416."
    }
  ],
  "lastModified": "2026-06-17T00:06:07.890",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:cisco:cisco_ons_15454_system_software:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A4C445CA-51E4-45F7-873B-2A1DC2734F8F",
              "versionEndIncluding": "9.6"
            },
            {
              "criteria": "cpe:2.3:o:cisco:cisco_ons_15454_system_software:9.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "383BBBEE-F2B8-4CD4-9390-73E536D3C716"
            },
            {
              "criteria": "cpe:2.3:o:cisco:cisco_ons_15454_system_software:9.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AD64656F-0FA2-4F1A-9777-C37686DE9E31"
            },
            {
              "criteria": "cpe:2.3:o:cisco:cisco_ons_15454_system_software:9.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "95EB5962-F6D9-4606-A28B-521CAAA5B696"
            },
            {
              "criteria": "cpe:2.3:o:cisco:cisco_ons_15454_system_software:9.2.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9DAE1275-EC96-4898-96A9-15B00414FB51"
            },
            {
              "criteria": "cpe:2.3:o:cisco:cisco_ons_15454_system_software:9.2.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4C01C932-64BC-48F5-8037-81A58B8DC6F3"
            },
            {
              "criteria": "cpe:2.3:o:cisco:cisco_ons_15454_system_software:9.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3DE3CF6F-1FED-4402-BF98-21C0CBF9FDF5"
            },
            {
              "criteria": "cpe:2.3:o:cisco:cisco_ons_15454_system_software:9.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "97521058-BCB4-4152-B8FA-EF959966A892"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:cisco:ons_15454:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "054BA906-B607-4A65-A6E3-D3D7F8096235"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "psirt@cisco.com"
}