This script is Copyright (C) 2014 Tenable Network Security, Inc.
The remote host is affected by multiple vulnerabilities.
The remote Cisco ONS device is running a software version known to be
affected by multiple OpenSSL related vulnerabilities :
- An error exists related to the implementation of the
Elliptic Curve Digital Signature Algorithm (ECDSA) that
could allow nonce disclosure via the 'FLUSH+RELOAD'
cache side-channel attack. (CVE-2014-0076)
- An unspecified error exists related to anonymous ECDH
ciphersuites that could allow denial of service
attacks. Note this issue only affects OpenSSL TLS
See also :
No known fixed version have been released. There are partial
workarounds detailed in the vendor advisory.
Risk factor :
Medium / CVSS Base Score : 6.8
CVSS Temporal Score : 5.9
Public Exploit Available : true