CVE-2014-2140

Name of the Vulnerable Software and Affected Versions Cisco ONS 15454 controller cards versions 9.6 and earlier

Description The issue allows remote attackers to cause a denial of service, resulting in a card reset. This is achieved through a TCP FIN attack that triggers file-descriptor exhaustion and a failure to open a CAL pipe.

Recommendations For versions 9.6 and earlier, update to a version later than 9.6 to resolve the issue.