Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cisco ONS15454 and ONS15327 running ONS before 3.4 stores usernames and passwords in cleartext in the image database for the TCC, TCC+ or XTC, which could allow attackers to gain privileges by obtaining the passwords from the image database or a backup.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Cisco ONS15454/ONS15327光纤传输平台明文验证信息漏洞
Vulnerability Description
Cisco ONS15454和Cisco ONS15327是由CISCO公司开发的光纤网络平台。 Cisco ONS15454和Cisco ONS15327设备在备份数据库中以明文方式存储用户名和密码，远程攻击者可以利用这个漏洞获得相关用户验证信息，如管理员密码，可使用这些信息访问完全控制Cisco ONS系统平台。 TCC， TCC+或XTC接口运行的映象数据库中以明文方式存储着用户名和密码，攻击者可以通过分析离线备份数据库，或者任意用户名和密码对。使用获得的管理员密码，攻击者可以远程或者本地访问TCC
CVSS Information
N/A
Vulnerability Type
N/A