CVE-2021-40113

CRITICAL

Cisco Catalyst PON Series Switches ONT Firmware - Unauthenticated Improper Access Control

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2021-40113. PoCs published by karamMahmad.

AI-analyzed exploit summary The repository lacks functional exploit code and instead references an external 'Brut File' (CVE-2021-40113.json) without providing technical details or PoC code. The README is a generic description of the vulnerability with no actionable exploit information.

Description

Multiple vulnerabilities in the web-based management interface of the Cisco Catalyst Passive Optical Network (PON) Series Switches Optical Network Terminal (ONT) could allow an unauthenticated, remote attacker to perform the following actions: Log in with a default credential if the Telnet protocol is enabled Perform command injection Modify the configuration For more information about these vulnerabilities, see the Details section of this advisory.

Exploits (1)

nomisec SUSPICIOUS
by karamMahmad · poc
https://github.com/karamMahmad/CVE-2021-40113

The repository lacks functional exploit code and instead references an external 'Brut File' (CVE-2021-40113.json) without providing technical details or PoC code. The README is a generic description of the vulnerability with no actionable exploit information.

Classification
Suspicious 90%
Attack Type
Other
Complexity
Theoretical
Reliability
Theoretical
Target: Cisco Catalyst PON Series Switches ONT
No auth needed
Prerequisites: Telnet protocol enabled on target
devstral-2 · analyzed Feb 19, 2026 Full analysis →

References (1)

Core 1
Core References

Scores

CVSS v3 10.0
EPSS 0.0463
EPSS Percentile 90.5%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact total

Details

CWE
CWE-284 CWE-78
Status published
Products (5)
cisco/catalyst_pon_switch_cgp-ont-1p_firmware < 1.1.1.14
cisco/catalyst_pon_switch_cgp-ont-4p_firmware < 1.1.3.17
cisco/catalyst_pon_switch_cgp-ont-4pv_firmware < 1.1.3.17
cisco/catalyst_pon_switch_cgp-ont-4pvc_firmware < 1.1.3.17
cisco/catalyst_pon_switch_cgp-ont-4tvcw_firmware < 1.1.3.17
Published Nov 04, 2021
Tracked Since Feb 18, 2026