CVE-2006-1672: cisco ons_15310-cl_series
Vulnerability summary
CVE-2006-1672 is a high (CVSS 7.5) vulnerability in cisco ons_15310-cl_series. EPSS estimates a 4.12% chance of exploitation in the next 30 days, higher than 90.6% of scored vulnerabilities.
Timeline
- 07-04-2006PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
The installation of Cisco Transport Controller (CTC) for Cisco Optical Networking System (ONS) 15000 series nodes adds a Java policy file entry with a wildcard that grants the java.security.AllPermission permission to any http URL containing "fs/LAUNCHER.jar", which allows remote attackers to execute arbitrary code on a CTC workstation, aka bug ID CSCea25049.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
4.12%
Chance of exploitation in the next 30 days
Percentile
91%
Versus all other CVEs
30-day change
+0.09 pp
From 4.02% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Cisco4 products
- ons_15310-cl_series0
- ons_156000
- optical_networking_systems_software1.0 | 1.1 | 1.1\(0\) | 1.1\(1\) | 1.3\(0\) | 3.0 | 3.1.0 | 3.2 | 3.3.0 | 3.4.0 | 4.0\(1\) | 4.0\(2\) | 4.0\(0\) | 4.1\(0\) | 4.1\(1\) | 4.1\(2\) | 4.1\(3\) | 4.1.4 | 4.6\(0\) | 4.6\(1\)
- transport_controller4.0.x
1 vendor · 4 products