Lucene search
+L

82 matches found

Vulnrichment
Vulnrichment
added 2024/09/11 4:38 p.m.16 views

CVE-2024-20483 Cisco IOS XR PON Controller Command Injection Vulnerabilities

Multiple vulnerabilities in Cisco Routed PON Controller Software, which runs as a docker container on hardware that is supported by Cisco IOS XR Software, could allow an authenticated, remote attacker with Administrator-level privileges on the PON Manager or direct access to the PON Manager Mongo...

7.2CVSS8.3AI score0.01098EPSS
SaveExploits0References1
CVE
CVE
added 2024/09/11 4:38 p.m.130 views

CVE-2024-20483

CVE-2024-20483 involves multiple vulnerabilities in Cisco Routed PON Controller Software (Docker container on Cisco IOS XR hardware) where insufficient validation of arguments to configuration commands can allow an authenticated, admin-level attacker on the PON Manager or direct access to its Mon...

7.2CVSS7.7AI score0.01098EPSS
SaveIn wildExploits0References1Affected Software1
CNNVD
CNNVD
added 2024/09/11 12:00 a.m.18 views

Cisco IOS XR 安全漏洞

Cisco IOS XR is a set of operating systems developed by Cisco USA for its network devices. A security vulnerability exists in Cisco IOS XR that stems from the software running as a Docker container on hardware supported by the Cisco IOS XR software, which could allow an authenticated, remote...

7.2CVSS7.8AI score0.01098EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2024/09/11 12:00 a.m.229 views

CVE-2024-20483

Multiple vulnerabilities in Cisco Routed PON Controller Software, which runs as a docker container on hardware that is supported by Cisco IOS XR Software, could allow an authenticated, remote attacker with Administrator-level privileges on the PON Manager or direct access to the PON Manager Mongo...

7.2CVSS8.3AI score0.01098EPSS
SaveIn wildExploits0References2
NVD
NVD
added 2022/11/22 5:15 p.m.30 views

CVE-2022-39070

There is an access control vulnerability in some ZTE PON OLT products. Due to improper access control settings, remote attackers could use the vulnerability to log in to the device and execute any operation...

9.8CVSS0.00829EPSS
SaveExploits0References1
Prion
Prion
added 2022/11/22 5:15 p.m.20 views

Improper access control

There is an access control vulnerability in some ZTE PON OLT products. Due to improper access control settings, remote attackers could use the vulnerability to log in to the device and execute any operation...

7.5CVSS9.4AI score0.00829EPSS
SaveExploits0References1Affected Software2
Vulnrichment
Vulnrichment
added 2022/11/22 12:00 a.m.10 views

CVE-2022-39070

There is an access control vulnerability in some ZTE PON OLT products. Due to improper access control settings, remote attackers could use the vulnerability to log in to the device and execute any operation...

9.5AI score0.00829EPSS
SaveExploits0References1
CVE
CVE
added 2022/11/22 12:00 a.m.78 views

CVE-2022-39070

The CVE-2022-39070 entry concerns ZTE ZXA10 C3XX/ZTE PON OLT devices with an improper access control vulnerability that allows remote attackers to log in and execute arbitrary operations. Public sources in the connected documents consistently describe the root cause as access-control misconfigura...

9.8CVSS9.4AI score0.00829EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2022/11/22 12:00 a.m.34 views

CVE-2022-39070

There is an access control vulnerability in some ZTE PON OLT products. Due to improper access control settings, remote attackers could use the vulnerability to log in to the device and execute any operation...

9.7AI score0.00829EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2022/11/22 12:00 a.m.9 views

PT-2022-24712 · Zte · Zte Pon Olt

Name of the Vulnerable Software and Affected Versions: ZTE PON OLT products affected versions not specified Description: The issue is related to improper access control settings in ZTE PON OLT products, allowing remote attackers to log in to the device and execute any operation. Recommendations: ...

9.8CVSS7.2AI score0.00829EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
added 2021/12/01 12:00 a.m.13 views

The vulnerability of the web interface of Cisco Catalyst PON CGP-ONT series microprogramming software routers is related to insufficient validation of input data. This allows a perpetrator to execute arbitrary code.

The vulnerability of the web interface of Cisco Catalyst PON CGP-ONT series microprogramming software routers is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS8.3AI score0.01745EPSS
SaveExploits0References3Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/12/01 12:00 a.m.15 views

The vulnerability of the web interface of Cisco Catalyst PON CGP-ONT series microprogramming software routers is related to insufficient validation of input data. This allows a perpetrator to execute arbitrary code.

The vulnerability of the web interface of Cisco Catalyst PON CGP-ONT series microprogramming software routers is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created HTTPS request from a remo...

7.5CVSS7.9AI score0.01386EPSS
SaveExploits0References3Affected Software5
Tenable Nessus
Tenable Nessus
added 2021/11/15 12:00 a.m.13 views

Cisco Catalyst PON Series Web Detection

The web management interface for a Cisco Catalyst PON Series device was detected on the remote host. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid155349; scriptversion"1.2";...

5.5AI score
SaveExploits0References1
OSV
OSV
added 2021/11/04 4:15 p.m.9 views

CVE-2021-34795

Multiple vulnerabilities in the web-based management interface of the Cisco Catalyst Passive Optical Network PON Series Switches Optical Network Terminal ONT could allow an unauthenticated, remote attacker to perform the following actions: Log in with a default credential if the Telnet protocol i...

9.8CVSS7.6AI score0.01745EPSS
SaveExploits0References1
OSV
OSV
added 2021/11/04 4:15 p.m.9 views

CVE-2021-40112

Multiple vulnerabilities in the web-based management interface of the Cisco Catalyst Passive Optical Network PON Series Switches Optical Network Terminal ONT could allow an unauthenticated, remote attacker to perform the following actions: Log in with a default credential if the Telnet protocol i...

7.5CVSS5.9AI score0.01386EPSS
SaveExploits0References1
NVD
NVD
added 2021/11/04 4:15 p.m.27 views

CVE-2021-40112

Multiple vulnerabilities in the web-based management interface of the Cisco Catalyst Passive Optical Network PON Series Switches Optical Network Terminal ONT could allow an unauthenticated, remote attacker to perform the following actions: Log in with a default credential if the Telnet protocol i...

10CVSS0.01386EPSS
SaveExploits0References1
NVD
NVD
added 2021/11/04 4:15 p.m.26 views

CVE-2021-34795

Multiple vulnerabilities in the web-based management interface of the Cisco Catalyst Passive Optical Network PON Series Switches Optical Network Terminal ONT could allow an unauthenticated, remote attacker to perform the following actions: Log in with a default credential if the Telnet protocol i...

10CVSS0.01745EPSS
SaveExploits0References1
NVD
NVD
added 2021/11/04 4:15 p.m.35 views

CVE-2021-40113

Multiple vulnerabilities in the web-based management interface of the Cisco Catalyst Passive Optical Network PON Series Switches Optical Network Terminal ONT could allow an unauthenticated, remote attacker to perform the following actions: Log in with a default credential if the Telnet protocol i...

10CVSS0.04631EPSS
SaveExploits0References1
Prion
Prion
added 2021/11/04 4:15 p.m.25 views

Command injection

Multiple vulnerabilities in the web-based management interface of the Cisco Catalyst Passive Optical Network PON Series Switches Optical Network Terminal ONT could allow an unauthenticated, remote attacker to perform the following actions: Log in with a default credential if the Telnet protocol i...

7.5CVSS9.6AI score0.01745EPSS
SaveExploits0References1Affected Software5
Prion
Prion
added 2021/11/04 4:15 p.m.26 views

Command injection

Multiple vulnerabilities in the web-based management interface of the Cisco Catalyst Passive Optical Network PON Series Switches Optical Network Terminal ONT could allow an unauthenticated, remote attacker to perform the following actions: Log in with a default credential if the Telnet protocol i...

7.5CVSS9.7AI score0.04631EPSS
SaveExploits0References1Affected Software5
Rows per page
Query Builder