CVE:CVE-2021-40113
CNNVD:CNNVD-202111-357
Cisco Catalyst Passive Optical Network Series Switches（Catalyst Pon Series Switches）是美国思科（Cisco）公司的一系列高性能、结构简单、易于维护的交换机。用于提供具有竞争力的网络解决方案。
Cisco Catalyst Passive Optical Network Series Switches 存在操作系统命令注入漏洞，该漏洞源于Cisco Catalyst PON系列交换机ONT基于web的管理界面对用户提供的输入验证不足造成的。攻击者可利用该漏洞在受影响的设备上执行任意命令。
solution:Upgrade cisco catalyst_pon_switch_cgp-ont-1p_firmware to a higher version than 1.1.1.14,and avoid the version (,1.1.1.14); Upgrade cisco catalyst_pon_switch_cgp-ont-4p_firmware to a higher version than 1.1.3.17,and avoid the version (,1.1.3.17); Upgrade cisco catalyst_pon_switch_cgp-ont-4pvc_firmware to a higher version than 1.1.3.17,and avoid the version (,1.1.3.17); Upgrade cisco catalyst_pon_switch_cgp-ont-4tvcw_firmware to a higher version than 1.1.3.17,and avoid the version (,1.1.3.17); Upgrade cisco catalyst_pon_switch_cgp-ont-4pv_firmware to a higher version than 1.1.3.17,and avoid the version (,1.1.3.17)