CVE-2008-3818: Cisco ONS 15310-CL, 15310-MA, 15327, 15454, 15454 SDH, and 15600 with software 7.0.2 through 7.0.6, 7.2.2,...

Security readout for executives and security teams

This issue can let a remote attacker crash or reset control cards on listed Cisco ONS optical networking platforms using a crafted TCP session. The business risk is service disruption in legacy transport infrastructure, not data theft. The provided sources do not show active exploitation or a CVSS score. Exposure is most likely in organizations still operating the named legacy Cisco ONS optical transport platforms on affected software trains. Internet exposure is not established by the bundle; risk depends on whether TCP-accessible services on these systems are reachable from untrusted networks. Treat as high priority where affected ONS equipment supports production transport or carrier services. The issue is old, but legacy infrastructure often remains in service, and a control-card reset can create operational disruption. Mitigation focus: Inventory Cisco ONS platforms and software versions against the affected list.; Review Cisco’s advisory for fixed software and vendor-approved mitigations.; Reduce untrusted TCP reachability to affected ONS systems where operationally feasible..

Prepared

Jun 28, 2026, 11:41 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.