What is the CVSS score of CVE-2013-6701?

CVE-2013-6701 has a CVSS 2.0 base score of 5.0 (Medium). CVSS vector: AV:N/AC:L/Au:N/C:N/I:N/A:P. EPSS exploitation probability: 0.7%.

Cisco Ons 15454 System Software CVE-2013-6701

MEDIUM

Improper Input Validation (CWE-20)

2013-12-18 psirt@cisco.com

Denial Of Service Cisco Cisco Ons 15454 System Software Ons 15454 Mspp Ons 15454 Mstp Ons 15454E Optical Transport Platform Ons 15454 Ons 15454 Multiservice Transport Platform Ons 15454 Sdh Multiservice Provisioning Platform Ons 15454 Sonet Multiservice Provisioning Platform

5.0

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

5.0 MEDIUM

AV:N/AC:L/Au:N/C:N/I:N/A:P

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:N/AC:L/Au:N/C:N/I:N/A:P

Attack Vector

Network

Attack Complexity

Low

Confidentiality

None

Integrity

None

Availability

Lifecycle Timeline

CVE Published

Dec 18, 2013 - 16:04 cve.org

MEDIUM 5.0

DescriptionCVE.org

The tNetTaskLimit process on the Transport Node Controller (TNC) on Cisco ONS 15454 devices with software 9.6 and earlier does not properly prioritize health pings, which allows remote attackers to cause a denial of service (watchdog timeout and TNC reset) via a flood of network traffic, aka Bug ID CSCud97155.

AnalysisAI

The tNetTaskLimit process on the Transport Node Controller (TNC) on Cisco ONS 15454 devices with software 9.6 and earlier does not properly prioritize health pings, which allows remote attackers to. Rated medium severity (CVSS 5.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-20. The tNetTaskLimit process on the Transport Node Controller (TNC) on Cisco ONS 15454 devices with software 9.6 and earlier does not properly prioritize health pings, which allows remote attackers to cause a denial of service (watchdog timeout and TNC reset) via a flood of network traffic, aka Bug ID CSCud97155. Affected products include: Cisco Cisco Ons 15454 System Software, Cisco Ons 15454 Mspp, Cisco Ons 15454 Mstp, Cisco Ons 15454E Optical Transport Platform, Cisco Ons 15454.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.