CVE-2004-1436

HIGH 7.5CVE-2004-1436 · Published 31/12/2004 · updated 16/06/2026

In short

CVE-2004-1436 is a HIGH (CVSS 7.5) vulnerability affecting optical networking systems software (cisco).
Chance of exploitation in the next 30 days (EPSS): 3.1%, higher than 87.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
optical networking systems software cisco	`= 1.0= 1.1= 1.1(0)= 1.1(1)= 1.3(0)= 2.3(5)= 3.0= 3.1.0= 3.2= 3.2.0= 3.3.0= 3.4.0= 4.0(0)= 4.0(1)= 4.0(2)= 4.0.0= 4.1(0)= 4.1(1)= 4.1(2)= 4.1(3)= 4.5= 4.6(0)= 4.6(1)`	No fix yet

Description

The Transaction Language 1 (TL1) login interface in Cisco ONS 15327 4.6(0) and 4.6(1) and 15454 and 15454 SDH 4.6(0) and 4.6(1), when a user account is configured with a blank password, allows remote attackers to gain unauthorized access by logging in with a password larger than 10 characters.

References

secunia.com/advisories/12117
cisco.com/warp/public/707/cisco-sa-20040721-ons.shtml · Vendor Advisory
kb.cert.org/vuls/id/760432 · Third Party Advisory
securityfocus.com/bid/10768
exchange.xforce.ibmcloud.com/vulnerabilities/16766

More vulnerabilities in optical networking systems software

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

optical networking systems software

cisco

= 1.0= 1.1= 1.1(0)= 1.1(1)= 1.3(0)= 2.3(5)= 3.0= 3.1.0= 3.2= 3.2.0= 3.3.0= 3.4.0= 4.0(0)= 4.0(1)= 4.0(2)= 4.0.0= 4.1(0)= 4.1(1)= 4.1(2)= 4.1(3)= 4.5= 4.6(0)= 4.6(1)

No fix yet

More vulnerabilities in optical networking systems software

See all →