85 matches found
CVE-2021-40113
CVE-2021-40113 Cisco Catalyst Passive Optical Network PON Series Switches Optical Network Terminal ONT のウェブベース管理インターフェースに複数の脆弱性が存在し、認証されていないリモート攻撃者が以下のアクションを実行できる可能性があります：Telnetプロトコルが有効な場合、デフォルトの認証情報でログインする、コマンドインジェクションを実行する、設定を変更する。これらの脆弱性の詳細については、本アドバイザリの「詳細」セクションを参照してください。 authentication|...
CVE-2020-23591
CVE-2020-23591 OPTILINK E-PON 「型番: OP-XT71000N」 「ハードウェアバージョン: V2.2」 & 「ファームウェアバージョン: OPV3.3.1-191028」 「OPTILINK OP-XT71000N ハードウェアバージョン: V2.2 , ファームウェアバージョン: OPV3.3.1-191028」において脆弱性が発見されました。これにより攻撃者は「 /mgmdevupgrade.asp 」を介して任意のファイルをアップロードでき、「すべてのファイルを削除してサービス拒否 コード内の 'rm -rf . ' を使用、リバースコネクション...
CVE-2020-23585
CVE-2020-23585 OPTILINK E-PON 「型番: OP-XT71000N」、「ハードウェアバージョン: V2.2」、および「ファームウェアバージョン: OPV3.3.1-191028」 リモートの攻撃者は、「OPTILINK OP-XT71000N ハードウェアバージョン: V2.2、ファームウェアバージョン:...
EUVD-2020-28010
Malware in sbrugna...
EUVD-2010-2443
Malware in sbrugna...
EUVD-2021-21445
Malware in sbrugna...
EUVD-2024-18198
Malicious code in bioql PyPI...
EUVD-2021-8906
Malicious code in bioql PyPI...
EUVD-2022-41616
Malicious code in bioql PyPI...
EUVD-2024-18204
Malicious code in bioql PyPI...
MAL-2025-13216 Malicious code in @zalastax/nolb-pon (npm)
The package @zalastax/nolb-pon was found to contain malicious code...
Malicious code in @zalastax/nolb-pon (npm)
The package @zalastax/nolb-pon was found to contain malicious code...
CVE-2022-39070
There is an access control vulnerability in some ZTE PON OLT products. Due to improper access control settings, remote attackers could use the vulnerability to log in to the device and execute any operation...
CVE-2021-21734
Some PON MDU devices of ZTE stored sensitive information in plaintext, and users with login authority can obtain it by inputing command. This affects: ZTE PON MDU device ZXA10 F821 V1.7.0P3T22, ZXA10 F822 V1.4.3T6, ZXA10 F819 V1.2.1T5, ZXA10 F832 V1.1.1T7, ZXA10 F839 V1.1.0T8, ZXA10 F809 V3.2.1T1...
Security-By-Design at the Telco Edge with OSS: Challenges and Lessons Learned
This paper presents our experience, in the context of an industrial R&D project, on securing GENIO, a platform for edge computing on Passive Optical Network PON infrastructures, and based on Open-Source Software OSS. We identify threats and related mitigations through hardening, vulnerability...
CVE-2024-20483
Multiple vulnerabilities in Cisco Routed PON Controller Software, which runs as a docker container on hardware that is supported by Cisco IOS XR Software, could allow an authenticated, remote attacker with Administrator-level privileges on the PON Manager or direct access to the PON Manager Mongo...
The vulnerability of the Routed PON Controller Software component in the Cisco IOS XR operating system of Cisco NCS 540 Series Routers, NCS 5500 Series Routers, and NCS 5700 Series Routers allows attackers to execute arbitrary commands.
The vulnerability of the Routed PON Controller Software in Cisco IOS XR routers from the Cisco NCS 540 Series, NCS 5500 Series, and NCS 5700 Series routers exists due to the lack of measures taken to neutralize specific elements used in the operating system commands. Exploiting this vulnerability...
CVE-2024-20483
Multiple vulnerabilities in Cisco Routed PON Controller Software, which runs as a docker container on hardware that is supported by Cisco IOS XR Software, could allow an authenticated, remote attacker with Administrator-level privileges on the PON Manager or direct access to the PON Manager Mongo...
CVE-2024-20489
A vulnerability in the storage method of the PON Controller configuration file could allow an authenticated, local attacker with low privileges to obtain the MongoDB credentials. This vulnerability is due to improper storage of the unencrypted database credentials on the device that is running...
CVE-2024-20483
Multiple vulnerabilities in Cisco Routed PON Controller Software, which runs as a docker container on hardware that is supported by Cisco IOS XR Software, could allow an authenticated, remote attacker with Administrator-level privileges on the PON Manager or direct access to the PON Manager Mongo...