CVE-2021-40112: Cisco Catalyst Pon Switch Cgp-Ont-1p Firmware

High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days.

Multiple vulnerabilities in the web-based management interface of the Cisco Catalyst Passive Optical Network (PON) Series Switches Optical Network Terminal (ONT) could allow an unauthenticated, remote attacker to perform the following actions: Log in with a default credential if the Telnet protocol is enabled Perform command injection Modify the configuration For more information about these vulnerabilities, see the Details section of this advisory.

Affected products

• Cisco Catalyst Pon Switch Cgp-Ont-1p Firmware: before 1.1.1.14 (fixed in 1.1.1.14)
• Cisco Catalyst Pon Switch Cgp-Ont-4p Firmware: before 1.1.3.17 (fixed in 1.1.3.17)
• Cisco Catalyst Pon Switch Cgp-Ont-4pv Firmware: before 1.1.3.17 (fixed in 1.1.3.17)
• Cisco Catalyst Pon Switch Cgp-Ont-4pvc Firmware: before 1.1.3.17 (fixed in 1.1.3.17)
• Cisco Catalyst Pon Switch Cgp-Ont-4tvcw Firmware: before 1.1.3.17 (fixed in 1.1.3.17)

Published 2021-11-04. Last modified 2026-06-17.