Lucene search

[email protected]CVE-2021-34795

HistoryNov 04, 2021 - 4:15 p.m.

CVE-2021-34795

2021-11-0416:15:09

CWE-1188

CWE-284

[email protected]

web.nvd.nist.gov

cisco

catalyst

pon

switches

ont

vulnerabilities

cve-2021-34795

security

advisory

nvd

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

10 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

9.7 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

56.9%

JSON

Multiple vulnerabilities in the web-based management interface of the Cisco Catalyst Passive Optical Network (PON) Series Switches Optical Network Terminal (ONT) could allow an unauthenticated, remote attacker to perform the following actions: Log in with a default credential if the Telnet protocol is enabled Perform command injection Modify the configuration For more information about these vulnerabilities, see the Details section of this advisory.

Affected configurations

NVD

Node

ciscocatalyst_pon_switch_cgp-ont-1p

AND

ciscocatalyst_pon_switch_cgp-ont-1p_firmwareRange<1.1.1.14

Node

ciscocatalyst_pon_switch_cgp-ont-4p

AND

ciscocatalyst_pon_switch_cgp-ont-4p_firmwareRange<1.1.3.17

Node

ciscocatalyst_pon_switch_cgp-ont-4pvc

AND

ciscocatalyst_pon_switch_cgp-ont-4pvc_firmwareRange<1.1.3.17

Node

ciscocatalyst_pon_switch_cgp-ont-4tvcw

AND

ciscocatalyst_pon_switch_cgp-ont-4tvcw_firmwareRange<1.1.3.17

Node

ciscocatalyst_pon_switch_cgp-ont-4pv

AND

ciscocatalyst_pon_switch_cgp-ont-4pv_firmwareRange<1.1.3.17

CPENameOperatorVersion
cisco:catalyst_pon_switch_cgp-ont-1p_firmwarecisco catalyst pon switch cgp-ont-1p firmwarelt1.1.1.14

CPE	Name	Operator	Version
cisco:catalyst_pon_switch_cgp-ont-1p_firmware	cisco catalyst pon switch cgp-ont-1p firmware	lt	1.1.1.14

CNA Affected

[
  {
    "product": "Cisco Catalyst PON Series ",
    "vendor": "Cisco",
    "versions": [
      {
        "status": "affected",
        "version": "n/a"
      }
    ]
  }
]

References

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-catpon-multivulns-CE3DSYGr

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

10 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

9.7 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

56.9%

JSON

Related for CVE-2021-34795

cvelist1 prion1 nvd1 cisco1 thn1