The vulnerability of the CData optical line terminals 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 97168P, FD1002S, FD1104, FD1104B, FD1104S, FD1104SN, FD1108S, FD1204S-R2, FD1204SN, FD1204SN-R2, FD1208S-R2, FD1216S-R1, FD1608GS, FD1608SN, FD1616GS, FD1616SN, FD8000 – relates to the transmission of secret information in the form of plaintext. This vulnerability allows a attacker to execute a “man-in-the-middle” attack.

🗓️ 21 Apr 2021 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

The listed CData and CDATA devices transmit plaintext, allowing remote man-in-the-middle attacks.

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2020-29055	25 Nov 202000:47	–	circl
CNNVD	Multiple CDATA product security vulnerabilities	24 Nov 202000:00	–	cnnvd
CVE	CVE-2020-29055	24 Nov 202021:00	–	cve
Cvelist	CVE-2020-29055	24 Nov 202021:00	–	cvelist
EUVD	EUVD-2020-21437	7 Oct 202500:30	–	euvd
NVD	CVE-2020-29055	24 Nov 202021:15	–	nvd
OSV	CVE-2020-29055	24 Nov 202021:15	–	osv
Prion	Design/Logic Flaw	24 Nov 202021:15	–	prion
RedhatCVE	CVE-2020-29055	22 May 202516:36	–	redhatcve

Vulners

Node

c-data 72408aMatch1.2.2

c-data 72408aMatch2.4.05_000

c-data 72408aMatch2.4.04_001

c-data 72408aMatch2.4.03_000

c-data 9008aMatch1.2.2

c-data 9016aMatch1.2.2

c-data 92408aMatch1.2.2

c-data 92416aMatch1.2.2

c-data 9288Match1.2.2

c-data 97016Match1.2.2

c-data 97024pMatch1.2.2

c-data 97028pMatch1.2.2

c-data 97042pMatch1.2.2

c-data 97084pMatch1.2.2

c-data 97168pMatch1.2.2

c-data fd1002sMatch1.2.2

c-data fd1104Match1.2.2

c-data fd1104bMatch1.2.2

c-data fd1104sMatch1.2.2

c-data fd1104snMatch1.2.2

c-data fd1108sMatch1.2.2

c-data fd1204snMatch1.2.2

c-data fd1204sn-r2Match1.2.2

c-data fd1204s-r2Match1.2.2

c-data fd1208s-r2Match1.2.2

c-data fd1216s-r1Match1.2.2

c-data fd1608gsMatch1.2.2

c-data fd1608snMatch1.2.2

c-data fd1616gsMatch1.2.2

c-data fd1616snMatch1.2.2

c-data fd8000Match1.2.2

c-data fd8000Match2.4.05_000

c-data fd1616snMatch2.4.05_000

c-data fd1616gsMatch2.4.05_000

c-data fd1608snMatch2.4.05_000

c-data fd1608gsMatch2.4.05_000

c-data fd1216s-r1Match2.4.05_000

c-data fd1208s-r2Match2.4.05_000

c-data fd1204s-r2Match2.4.05_000

c-data fd1204sn-r2Match2.4.05_000

c-data fd1204snMatch2.4.05_000

c-data fd1108sMatch2.4.05_000

c-data fd1104snMatch2.4.05_000

c-data fd1104sMatch2.4.05_000

c-data fd1104bMatch2.4.05_000

c-data fd1104Match2.4.05_000

c-data fd1002sMatch2.4.05_000

c-data 97168pMatch2.4.05_000

c-data 97084pMatch2.4.05_000

c-data 97042pMatch2.4.05_000

c-data 97028pMatch2.4.05_000

c-data 97024pMatch2.4.05_000

c-data 97016Match2.4.05_000

c-data 9288Match2.4.05_000

c-data 92416aMatch2.4.05_000

c-data 92408aMatch2.4.05_000

c-data 9016aMatch2.4.05_000

c-data 9008aMatch2.4.05_000

c-data 9008aMatch2.4.04_001

c-data 9016aMatch2.4.04_001

c-data 92408aMatch2.4.04_001

c-data 92416aMatch2.4.04_001

c-data 9288Match2.4.04_001

c-data 97016Match2.4.04_001

c-data 97024pMatch2.4.04_001

c-data 97028pMatch2.4.04_001

c-data 97042pMatch2.4.04_001

c-data 97084pMatch2.4.04_001

c-data 97168pMatch2.4.04_001

c-data fd1002sMatch2.4.04_001

c-data fd1104Match2.4.04_001

c-data fd1104bMatch2.4.04_001

c-data fd1104sMatch2.4.04_001

c-data fd1104snMatch2.4.04_001

c-data fd1108sMatch2.4.04_001

c-data fd1204snMatch2.4.04_001

c-data fd1204sn-r2Match2.4.04_001

c-data fd1204s-r2Match2.4.04_001

c-data fd1208s-r2Match2.4.04_001

c-data fd1216s-r1Match2.4.04_001

c-data fd1608gsMatch2.4.04_001

c-data fd1608snMatch2.4.04_001

c-data fd1616gsMatch2.4.04_001

c-data fd1616snMatch2.4.04_001

c-data fd8000Match2.4.04_001

c-data fd8000Match2.4.03_000

c-data fd1616snMatch2.4.03_000

c-data fd1616gsMatch2.4.03_000

c-data fd1608snMatch2.4.03_000

c-data fd1608gsMatch2.4.03_000

c-data fd1216s-r1Match2.4.03_000

c-data fd1208s-r2Match2.4.03_000

c-data fd1204s-r2Match2.4.03_000

c-data fd1204sn-r2Match2.4.03_000

c-data fd1204snMatch2.4.03_000

c-data fd1108sMatch2.4.03_000

c-data fd1104snMatch2.4.03_000

c-data fd1104sMatch2.4.03_000

c-data fd1104bMatch2.4.03_000

c-data fd1104Match2.4.03_000

c-data fd1002sMatch2.4.03_000

c-data 97168pMatch2.4.03_000

c-data 97084pMatch2.4.03_000

c-data 97042pMatch2.4.03_000

c-data 97028pMatch2.4.03_000

c-data 97024pMatch2.4.03_000

c-data 97016Match2.4.03_000

c-data 9288Match2.4.03_000

c-data 92416aMatch2.4.03_000

c-data 92408aMatch2.4.03_000

c-data 9016aMatch2.4.03_000

c-data 9008aMatch2.4.03_000

Source	Link
securitylab	www.securitylab.ru/news/509964.php
pierrekim	www.pierrekim.github.io/blog/2020-07-07-cdata-olt-0day-vulnerabilities.html
web	www.web.nvd.nist.gov/view/vuln/detail

21 Apr 2021 00:00Current

6.4Medium risk

Vulners AI Score6.4

CVSS 24.3

CVSS 35.9

EPSS0.00658