CVE-2021-34795
Multiple vulnerabilities in the web-based management interface of the Cisco Catalyst Passive Optical Network (PON) Series Switches Optical Network Terminal (ONT) could allow an unauthenticated, remote attacker to perform the following actions: Log in with a default credential if the Telnet protocol is enabled Perform command injection Modify the configuration For more information about these vulnerabilities, see the Details section of this advisory.
- Score
- CVSS 3.1 10.0 Critical
- Status
- Modified - psirt@cisco.com
- Published
- 2021-11-04
- Last modified
- 2024-11-07
- Weaknesses
- CWE-1188, CWE-284
Affected products
- Catalyst Pon Switch Cgp-ont-1p Firmware (Cisco)
- Catalyst Pon Switch Cgp-ont-4p Firmware (Cisco)
- Catalyst Pon Switch Cgp-ont-4pv Firmware (Cisco)
- Catalyst Pon Switch Cgp-ont-4pvc Firmware (Cisco)
- Catalyst Pon Switch Cgp-ont-4tvcw Firmware (Cisco)
- Cisco Catalyst Pon Series (Cisco)
References
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-catpon-multivulns-CE3DSYGr