Software Engineering Institute

Cisco's Optical Networking product line consists of a series of devices designed to offer high-bandwidth data services. These optical devices are managed through a series of control cards, which vary depending on the model of the device. There is a vulnerability in the way the XTC, TCC/TCC+/TCC2 and TCCi/TCC2 control cards handle invalid TCP responses. By sending an invalid TCP response to a vulnerable optical device, a remote attacker can cause the connection to enter an invalid TCP state. This could result in the control cards reseting.

Vulnerable
Cisco ONS 15327 Edge Optical Transport Platform releases:

• 4.6(0) and 4.6(1)
• 4.1(0) to 4.1(3)
• 4.0(0) to 4.0(2)
• 3.x(x) and earlier

• 4.6(0) and 4.6(1)
• 4.5(x)
• 4.1(0) to 4.1(3)
• 4.0(0) to 4.0(2)
• 3.x(x)
• earlier than 2.3(5)

• 4.6(0) and 4.6(1)
• 4.5(x)
• 4.1(0) to 4.1(3)
• 4.0(0) to 4.0(2)
• 3.x(x)
• earlier than 2.3(5)

A remote, unauthenticated attacker could cause control cards to reset on an affected optical device. Repeated exploitation of this vulnerability could result in a denial of service.

For more information on the impact of this vulnerability, please refer to the "Impact" section of the Cisco Advisory.

Upgrade
Please refer to the "Software Versions and Fixes" section of the Cisco Advisory for more information on upgrading.