A vulnerability has been reported in several Cisco ONS products, which can be exploited by malicious people to cause a DoS (Denial of Service).

The vulnerability is caused due to an unspecified error while processing TCP packets. This can be exploited to reset a control card via a specially crafted TCP data stream sent to an open card port.

Successful exploitation allows the disruption of synchronous data channels for all platforms except Cisco ONS 15600, and the temporary interruption of the management functionality.

The vulnerability is reported in the following hardware platforms:
* Cisco ONS 15310-CL Series
* Cisco ONS 15327 Series
* Cisco ONS 15454 MSPP
* Cisco ONS 15454 MSTP
* Cisco ONS 15600 Series

Solution
Update to a fixed version. Please see vendor advisory for a patch matrix.

Provided and/or discovered by
Reported by the vendor.

Original Advisory
http://www.cisco.com/warp/public/707/cisco-sa-20090114-ons.shtml

Deep Links
Links available in Customer Area