CVE-2021-34795CWE-284

Cisco Catalyst PON Series Switches Optical Network Terminal Vulnerabilities

Critical · published November 4, 2021

CVSS v3.1
10.0
EPSS
2%
Percentile
77.6
In the wild
Unconfirmed
What it is

🚨 An unlocked door to your network is waiting! The Cisco Catalyst PON Series Switches can be accessed with default credentials if Telnet is enabled, making it a playground for attackers. 🔥 Think of it like a restaurant where anyone can walk in, sit at the chef's table, and change the recipe at will — that's how easy it is for an attacker to modify configurations here! An attacker could log into the system and execute commands without breaking a sweat. This means they can tamper with your network settings, potentially leading to data breaches or service disruptions. The implications are absolutely devastating!

Put simply

Think of it like a restaurant where anyone can walk in, sit at the chef's table, and change the recipe at will — that's how easy it is for an attacker to modify configurations here! This vulnerability allows unauthenticated remote attackers to log in using default credentials when Telnet is enabled, leading to command injection and configuration modifications.

What to do

An attacker could log into the system and execute commands without breaking a sweat. This means they can tamper with your network settings, potentially leading to data breaches or service disruptions. The implications are absolutely devastating! Immediately disable Telnet on the affected devices and change any default credentials. Patch your systems as soon as an update addressing this vulnerability is available to ensure your network stays secure. You've got this! Follow these steps to fortify your defenses and keep those digital doors locked tight! 🛡️

The record
Technical detail
CVSS v3.1
10.0 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01745 · 77.6th percentile
Weakness
CWE-284 · Improper Access Control
Published
2021-11-04T15:35Z
EPSS history
Timeline
  • 04 NOV 15:35Z
    Cisco Catalyst PON Series Switches Optical Network Terminal Vulnerabilities
    cvelistv5