CVE-2004-0306: Cisco ONS 15327 before 4.1(3), ONS 15454 before 4.6(1), ONS 15454 SD before 4.1(3), and Cisco ONS 15600 bef...

Security readout for executives and security teams

Older Cisco ONS optical networking platforms may expose a TFTP service by default. A remote attacker could read or write system files on the active controller’s flash storage. For organizations still operating these systems, the business risk is disruption or unauthorized modification of network infrastructure files. Exposure is most likely in legacy telecom or optical transport environments still running the listed Cisco ONS releases, especially where management networks allow UDP/69 reachability. Prioritize if legacy Cisco ONS platforms remain in service. These are infrastructure systems, so unauthorized file read or write capability can carry operational impact even without current exploitation evidence. Mitigation focus: Upgrade affected ONS systems to Cisco’s fixed releases or later.; Review the Cisco advisory for supported workarounds and operational constraints.; Restrict UDP/69 access to trusted management networks only..

Prepared

Jun 30, 2026, 02:43 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.