CVE-2021-34795
Published: 04 November 2021
Summary
CVE-2021-34795 is a critical-severity Improper Access Control (CWE-284) vulnerability in Cisco Catalyst Pon Switch Cgp-Ont-1P Firmware. Its CVSS base score is 10.0 (Critical).
Operationally, ranked in the top 22.6% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2021-21445
Vulnerability details
Multiple vulnerabilities in the web-based management interface of the Cisco Catalyst Passive Optical Network (PON) Series Switches Optical Network Terminal (ONT) could allow an unauthenticated, remote attacker to perform the following actions: Log in with a default credential if the…
more
Telnet protocol is enabled Perform command injection Modify the configuration For more information about these vulnerabilities, see the Details section of this advisory.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
Likely Mitigating Controls AI
Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.
Defines roles, responsibilities, and access rules for configuration management activities, making improper access to configuration resources harder to exploit.
Baseline includes documented access control settings that are reviewed and maintained, reducing the ability to exploit improper access control.
Restricting available functions and services reduces the attack surface and enforces proper access control boundaries.
Tailoring selects and adjusts the precise set of access-control baselines and compensating controls required for the system, directly reducing improper access control exposure.
Central management enforces consistent access-control policies across systems, reducing the likelihood of missing or inconsistent enforcement.
Scans identify improper access control implementations and missing protections on system resources.
Explicit training on access control mechanisms and their operation makes improper access control harder to introduce via misconfiguration.
Guidance on effective use of access control mechanisms and known configuration vulnerabilities makes improper access control harder to exploit.