{"schema_version":"public-product-v1.1","generated_at":"2026-07-21T10:25:01Z","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","advisory":{"id":"cisco-sa-20090114-ons","slug":"cisco-sa-20090114-ons","vendor":"Cisco","title":"Cisco ONS Platform Crafted Packet Vulnerability","summary":"The Cisco ONS 15300 series Edge Optical Transport Platform, the Cisco ONS 15454 Optical Transport Platform, the Cisco ONS 15454 SDH Multiservice Platform, and the Cisco ONS 15600 Multiservice Switching Platform contains a vulnerability when processing TCP traffic streams that may result in a reload of the device control card. Cisco has released software updates that address this vulnerability. There are no workarounds that mitigate this vulnerability. Several mitigations exist that can limit the exposure of this vulnerability. This advisory is posted at https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20090114-ons.","severity":"High","published_at":"2009-01-14T16:00:00Z","updated_at":"2009-01-14T16:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20090114-ons","csaf_url":"https://sec.cloudapps.cisco.com/security/center/contentjson/CiscoSecurityAdvisory/cisco-sa-20090114-ons/csaf/cisco-sa-20090114-ons.json","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure."},"freshness":{"last_source_refreshed_at":"2026-07-21T05:16:34Z","latest_source_refresh_at":"2026-07-21T05:16:34Z","oldest_source_refresh_at":"2026-07-21T03:00:03Z","all_sources_fresh":true,"sources":[{"source":"cisco_advisories","label":"Cisco advisories","last_success_at":"2026-07-21T03:00:03Z","stale":false},{"source":"cisco_csaf","label":"Cisco CSAF","last_success_at":"2026-07-21T05:14:24Z","stale":false},{"source":"nvd_cves","label":"NVD CVEs","last_success_at":"2026-07-21T05:16:30Z","stale":false},{"source":"cisa_kev","label":"CISA KEV","last_success_at":"2026-07-21T05:16:31Z","stale":false},{"source":"first_epss","label":"EPSS","last_success_at":"2026-07-21T05:16:34Z","stale":false}]},"summary":{"cve_count":1,"visible_product_count":6,"public_evidence_count":6,"kev_count":0,"highest_epss":0.01953},"cves":[{"id":"CVE-2008-3818","kev":false,"epss":{"score":0.01953,"percentile":0.78047,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"}}],"public_evidence":[{"product":{"name":"Cisco ONS 15310CL System Software","slug":"cisco-ons-15310cl-system-software","vendor":"Cisco"},"cve":{"id":"CVE-2008-3818"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T04:29:38Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco ONS 15310CL System Software","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.01953,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"},"published_at":"2009-01-14T16:00:00Z","updated_at":"2009-01-14T16:00:00Z","advisory_updated_at":"2009-01-14T16:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20090114-ons","row_display_order":1},{"product":{"name":"Cisco ONS 15310MA System Software","slug":"cisco-ons-15310ma-system-software","vendor":"Cisco"},"cve":{"id":"CVE-2008-3818"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T04:29:38Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco ONS 15310MA System Software","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.01953,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"},"published_at":"2009-01-14T16:00:00Z","updated_at":"2009-01-14T16:00:00Z","advisory_updated_at":"2009-01-14T16:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20090114-ons","row_display_order":2},{"product":{"name":"Cisco ONS 15327 System Software","slug":"cisco-ons-15327-system-software","vendor":"Cisco"},"cve":{"id":"CVE-2008-3818"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T04:29:38Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco ONS 15327 System Software","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.01953,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"},"published_at":"2009-01-14T16:00:00Z","updated_at":"2009-01-14T16:00:00Z","advisory_updated_at":"2009-01-14T16:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20090114-ons","row_display_order":3},{"product":{"name":"Cisco ONS 15454 System Software","slug":"cisco-ons-15454-system-software","vendor":"Cisco"},"cve":{"id":"CVE-2008-3818"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T04:29:38Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco ONS 15454 System Software","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.01953,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"},"published_at":"2009-01-14T16:00:00Z","updated_at":"2009-01-14T16:00:00Z","advisory_updated_at":"2009-01-14T16:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20090114-ons","row_display_order":4},{"product":{"name":"Cisco ONS 15454 SDH System Software","slug":"cisco-ons-15454-sdh-system-software","vendor":"Cisco"},"cve":{"id":"CVE-2008-3818"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T04:29:38Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco ONS 15454 SDH System Software","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.01953,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"},"published_at":"2009-01-14T16:00:00Z","updated_at":"2009-01-14T16:00:00Z","advisory_updated_at":"2009-01-14T16:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20090114-ons","row_display_order":5},{"product":{"name":"Cisco ONS 15600 System Software","slug":"cisco-ons-15600-system-software","vendor":"Cisco"},"cve":{"id":"CVE-2008-3818"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T04:29:38Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco ONS 15600 System Software","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.01953,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"},"published_at":"2009-01-14T16:00:00Z","updated_at":"2009-01-14T16:00:00Z","advisory_updated_at":"2009-01-14T16:00:00Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20090114-ons","row_display_order":6}]}