Remote Denial of Service Vulnerability in Cisco ONS 15454 Controller Cards

CVE-2014-2140

Summary

A vulnerability exists in Cisco ONS 15454 controller cards that allows remote attackers to execute a denial of service attack. By leveraging a TCP FIN attack, attackers can trigger file-descriptor exhaustion, resulting in the failure to open a CAL pipe and forcing a card reset. This can severely disrupt network operations and compromise system availability.

References