{"cve":"CVE-2004-0306","nvd":{"published":"2004-11-23T05:00:00.000","modified":"2026-06-16T22:05:21.540","status":"Modified","description":"Cisco ONS 15327 before 4.1(3), ONS 15454 before 4.6(1), ONS 15454 SD before 4.1(3), and Cisco ONS 15600 before 1.3(0) enable TFTP service on UDP port 69 by default, which allows remote attackers to GET or PUT ONS system files on the current active TCC in the /flash0 or /flash1 directories.","cvss_v4":null,"cvss_v3":null,"cwes":[],"references":["http://www.cisco.com/warp/public/707/cisco-sa-20040219-ONS.shtml","http://www.securityfocus.com/bid/9699","https://exchange.xforce.ibmcloud.com/vulnerabilities/15264","http://www.cisco.com/warp/public/707/cisco-sa-20040219-ONS.shtml","http://www.securityfocus.com/bid/9699"],"products":["cisco:optical_networking_systems_software"],"source":"nvd","synced_at":"2026-10-19T19:37:11.487553034+00:00"},"epss":{"cve":"CVE-2004-0306","score":0.02117,"percentile":0.81845,"date":"2026-10-31"},"kev":null,"osv":[],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}