← Vulnerability feed

Vulnerability record · CVE-2013-6701 · published 18 December 2013

CVE-2013-6701: Cisco ons 15454 system software improper input validation vulnerability

Cisco · Cisco Ons 15454 System Software

The tNetTaskLimit process on the Transport Node Controller (TNC) on Cisco ONS 15454 devices with software 9.6 and earlier does not properly prioritize health pings, which allows remote attackers to cause a denial of service (watchdog timeout and TNC reset) via a flood of network traffic, aka Bug ID CSCud97155.

5.0 CVSS 2.0 Medium EPSS 1.9% · top 21.6% CWE-20 · Improper input validation
5.0CVSS 2.0 base score
1.9%EPSS exploitation probability, 30 days
NoNot in CISA KEV
8Affected product versions listed by NVD
6References
17 Jun 2026Last modified by NVD

Description

The tNetTaskLimit process on the Transport Node Controller (TNC) on Cisco ONS 15454 devices with software 9.6 and earlier does not properly prioritize health pings, which allows remote attackers to cause a denial of service (watchdog timeout and TNC reset) via a flood of network traffic, aka Bug ID CSCud97155.

AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected products

8 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6701 Vendor Advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=32200 Vendor Advisory
http://www.securitytracker.com/id/1029512 Third Party AdvisoryVDB Entry
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-6701 Vendor Advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=32200 Vendor Advisory
http://www.securitytracker.com/id/1029512 Third Party AdvisoryVDB Entry

Track CVE-2013-6701 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.8CVE-2006-1670Cisco optical networking systems software vulnerabilityControl cards for Cisco Optical Networking System (ONS) 15000 series nodes before 20060405 allow remote attackers to cause a denial of service (memor…EPSS 2.3%7.5CVE-2006-1672Cisco transport controller vulnerabilityThe installation of Cisco Transport Controller (CTC) for Cisco Optical Networking System (ONS) 15000 series nodes adds a Java policy file entry with …EPSS 4.1%7.1CVE-2013-6703Cisco ons 15454 improper input validation vulnerabilityThe TLS/SSLv3 module on Cisco ONS 15454 controller cards allows remote attackers to cause a denial of service (card reset) via crafted (1) TLS or (2)…EPSS 1.3%5.0CVE-2014-2139Cisco ons 15454 system software vulnerabilityCisco ONS 15454 controller cards with software 9.6 and earlier allow remote attackers to cause a denial of service (flash write outage) via a TCP FIN…EPSS 1.8%5.0CVE-2014-2140Cisco ons 15454 system software vulnerabilityCisco ONS 15454 controller cards with software 9.6 and earlier allow remote attackers to cause a denial of service (card reset) via a TCP FIN attack …EPSS 1.8%5.0CVE-2014-2142Cisco ons 15454 system software vulnerabilityCisco ONS 15454 controller cards with software 10.0 and earlier allow remote attackers to cause a denial of service (card reload) via a crafted HTTP …EPSS 1.8%5.0CVE-2006-1671Cisco transport controller vulnerabilityControl cards for Cisco Optical Networking System (ONS) 15000 series nodes before 20060405 allow remote attackers to cause a denial of service (card …EPSS 2.4%4.3CVE-2013-6702Cisco ons 15454 firmware improper input validation vulnerabilityThe management implementation on Cisco ONS 15454 controller cards with software 9.8 and earlier allows remote attackers to cause a denial of service …EPSS 1.9%

Source: NIST National Vulnerability Database (record CVE-2013-6701), CISA KEV, FIRST EPSS (scores of 2026-09-28). This page is refreshed as NVD updates the record.