critical10.0
CVE-2021-40112
Multiple vulnerabilities in the web-based management interface of the Cisco Catalyst Passive Optical Network (PON) Series Switches Optical Network Terminal (ON…
Impact
Multiple vulnerabilities in the web-based management interface of the Cisco Catalyst Passive Optical Network (PON) Series Switches Optical Network Terminal (ONT) could allow an unauthenticated, remote attacker to perform the following actions: Log in with a default credential if the Telnet protocol is enabled Perform command injection Modify the configuration For more information about these vulnerabilities, see the Details section of this advisory.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cisco | Catalyst Pon Switch Cgp-Ont-1p Firmware | before 1.1.1.14 |
| Cisco | Catalyst Pon Switch Cgp-Ont-4p Firmware | before 1.1.3.17 |
| Cisco | Catalyst Pon Switch Cgp-Ont-4pvc Firmware | before 1.1.3.17 |
| Cisco | Catalyst Pon Switch Cgp-Ont-4tvcw Firmware | before 1.1.3.17 |
| Cisco | Catalyst Pon Switch Cgp-Ont-4pv Firmware | before 1.1.3.17 |