CVE-2004-1433

MEDIUM 5.0CVE-2004-1433 · Published 31/12/2004 · updated 16/06/2026

In short

CVE-2004-1433 is a MEDIUM (CVSS 5.0) vulnerability affecting optical networking systems software (cisco).
Chance of exploitation in the next 30 days (EPSS): 4.1%, higher than 90.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
optical networking systems software cisco	`= 1.0= 1.1= 1.1(0)= 1.1(1)= 1.3(0)= 2.3(5)= 3.0= 3.1.0= 3.2= 3.2.0= 3.3.0= 3.4.0= 4.0(0)= 4.0(1)= 4.0(2)= 4.0.0= 4.1(0)= 4.1(1)= 4.1(2)= 4.1(3)= 4.5= 4.6(0)= 4.6(1)`	No fix yet

Description

Multiple versions of Cisco ONS 15327, ONS 15454, and ONS 15454 SDH, including 4.6(0) and 4.6(1), 4.5(x), 4.1(0) to 4.1(3), 4.0(0) to 4.0(2), and earlier versions, and ONS 15600 1.x(x), allows remote attackers to cause a denial of service (control card reset) via malformed (1) TCP and (2) UDP packets.

References

secunia.com/advisories/12117
cisco.com/warp/public/707/cisco-sa-20040721-ons.shtml · Vendor Advisory
kb.cert.org/vuls/id/486224 · Third Party Advisory
kb.cert.org/vuls/id/800384 · Third Party Advisory
securityfocus.com/bid/10768
exchange.xforce.ibmcloud.com/vulnerabilities/16762
exchange.xforce.ibmcloud.com/vulnerabilities/16764

More vulnerabilities in optical networking systems software

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

optical networking systems software

cisco

= 1.0= 1.1= 1.1(0)= 1.1(1)= 1.3(0)= 2.3(5)= 3.0= 3.1.0= 3.2= 3.2.0= 3.3.0= 3.4.0= 4.0(0)= 4.0(1)= 4.0(2)= 4.0.0= 4.1(0)= 4.1(1)= 4.1(2)= 4.1(3)= 4.5= 4.6(0)= 4.6(1)

No fix yet

Description

More vulnerabilities in optical networking systems software

See all →