CVE-2021-40112: Cisco Catalyst PON Series, заобикаляне на вход и права

Описание

Оригинално описание

Multiple vulnerabilities in the web-based management interface of the Cisco Catalyst Passive Optical Network (PON) Series Switches Optical Network Terminal (ONT) could allow an unauthenticated, remote attacker to perform the following actions: Log in with a default credential if the Telnet protocol is enabled Perform command injection Modify the configuration For more information about these vulnerabilities, see the Details section of this advisory.

Засегнати продукти

• Cisco Cisco Catalyst PON Series: n/a

Вид слабост

• CWE-284 Неправилен контрол на достъпа

История

Други уязвимости в Cisco Cisco Catalyst PON Series

• 10.0CVE-2021-40113
• 10.0CVE-2021-34795

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2021-40112
• https://nvd.nist.gov/vuln/detail/CVE-2021-40112
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-catpon-multivulns-CE3DSYGr