CVE-2004-0308

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2004-11-24 · updated 2026-06-16

Description

Unknown vulnerability in Cisco ONS 15327 before 4.1(3), ONS 15454 before 4.6(1), ONS 15454 SD before 4.1(3), and Cisco ONS15600 before 1.3(0) allows a superuser whose account is locked out, disabled, or suspended to gain unauthorized access via a Telnet connection to the VxWorks shell.

Affected products

Cisco Optical Networking Systems Software: 1.0, 4.0(1), 4.0(2), 4.0.0, 4.1(0), 4.1(1) (+4)

References

http://www.cisco.com/warp/public/707/cisco-sa-20040219-ONS.shtml
http://www.osvdb.org/4010
http://www.securityfocus.com/bid/9699
https://exchange.xforce.ibmcloud.com/vulnerabilities/15266
http://www.cisco.com/warp/public/707/cisco-sa-20040219-ONS.shtml
http://www.osvdb.org/4010
http://www.securityfocus.com/bid/9699
https://exchange.xforce.ibmcloud.com/vulnerabilities/15266

Get alerted when CVE-2004-0308 or the next vulnerability affects your stack