CVE-2004-0306

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2004-11-23 · updated 2026-06-16

Description

Cisco ONS 15327 before 4.1(3), ONS 15454 before 4.6(1), ONS 15454 SD before 4.1(3), and Cisco ONS 15600 before 1.3(0) enable TFTP service on UDP port 69 by default, which allows remote attackers to GET or PUT ONS system files on the current active TCC in the /flash0 or /flash1 directories.

Affected products

Cisco Optical Networking Systems Software: 1.0, 4.0(1), 4.0(2), 4.0.0, 4.1(0), 4.1(1) (+4)

References

http://www.cisco.com/warp/public/707/cisco-sa-20040219-ONS.shtml
http://www.securityfocus.com/bid/9699
https://exchange.xforce.ibmcloud.com/vulnerabilities/15264
http://www.cisco.com/warp/public/707/cisco-sa-20040219-ONS.shtml
http://www.securityfocus.com/bid/9699
https://exchange.xforce.ibmcloud.com/vulnerabilities/15264

Get alerted when CVE-2004-0306 or the next vulnerability affects your stack