CVE-2020-29058

🗓️ 24 Nov 2020 20:59:29Reported by mitreType

cve

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 72 Views

CVE-2020-29058: Cleartext credentials discovery on CDATA device

Reporter	Title	Published	Views	Family All 9
BDU FSTEC	The vulnerability of the CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 97168P, FD1002S, FD1104, FD1104B, FD1104S, FD1104SN, FD1108S, FD1204S-R2, FD1204SN, FD1204SN-R2, FD1208S-R2, FD1216S-R1, FD1608GS, FD1608SN, FD1616GS, FD1616SN, FD8000 optical line terminals is related to insufficient protection of registration data. This vulnerability allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.	21 Apr 202100:00	–	bdu_fstec
Circl	CVE-2020-29058	25 Nov 202000:47	–	circl
CNNVD	Security breaches in multiple CDATA products	24 Nov 202000:00	–	cnnvd
Cvelist	CVE-2020-29058	24 Nov 202020:59	–	cvelist
EUVD	EUVD-2020-21440	7 Oct 202500:30	–	euvd
NVD	CVE-2020-29058	24 Nov 202021:15	–	nvd
OSV	CVE-2020-29058	24 Nov 202021:15	–	osv
Prion	Design/Logic Flaw	24 Nov 202021:15	–	prion
RedhatCVE	CVE-2020-29058	22 May 202515:27	–	redhatcve

NVD

Node

cdatatec 72408a_firmwareMatch1.2.2

OR

cdatatec 72408a_firmwareMatch2.4.03_000

OR

cdatatec 72408a_firmwareMatch2.4.04_001

OR

cdatatec 72408a_firmwareMatch2.4.05_000

AND

cdatatec 72408aMatch-

Node

cdatatec 9008a_firmwareMatch1.2.2

OR

cdatatec 9008a_firmwareMatch2.4.03_000

OR

cdatatec 9008a_firmwareMatch2.4.04_001

OR

cdatatec 9008a_firmwareMatch2.4.05_000

AND

cdatatec 9008aMatch-

Node

cdatatec 9016a_firmwareMatch1.2.2

OR

cdatatec 9016a_firmwareMatch2.4.03_000

OR

cdatatec 9016a_firmwareMatch2.4.04_001

OR

cdatatec 9016a_firmwareMatch2.4.05_000

AND

cdatatec 9016aMatch-

Node

cdatatec 92408a_firmwareMatch1.2.2

OR

cdatatec 92408a_firmwareMatch2.4.03_000

OR

cdatatec 92408a_firmwareMatch2.4.04_001

OR

cdatatec 92408a_firmwareMatch2.4.05_000

AND

cdatatec 92408aMatch-

Node

cdatatec 92416a_firmwareMatch1.2.2

OR

cdatatec 92416a_firmwareMatch2.4.03_000

OR

cdatatec 92416a_firmwareMatch2.4.04_001

OR

cdatatec 92416a_firmwareMatch2.4.05_000

AND

cdatatec 92416aMatch-

Node

cdatatec 9288_firmwareMatch1.2.2

OR

cdatatec 9288_firmwareMatch2.4.03_000

OR

cdatatec 9288_firmwareMatch2.4.04_001

OR

cdatatec 9288_firmwareMatch2.4.05_000

AND

cdatatec 9288Match-

Node

cdatatec 97016_firmwareMatch1.2.2

OR

cdatatec 97016_firmwareMatch2.4.03_000

OR

cdatatec 97016_firmwareMatch2.4.04_001

OR

cdatatec 97016_firmwareMatch2.4.05_000

AND

cdatatec 97016Match-

Node

cdatatec 97024p_firmwareMatch1.2.2

OR

cdatatec 97024p_firmwareMatch2.4.03_000

OR

cdatatec 97024p_firmwareMatch2.4.04_001

OR

cdatatec 97024p_firmwareMatch2.4.05_000

AND

cdatatec 97024pMatch-

Node

cdatatec 97028p_firmwareMatch1.2.2

OR

cdatatec 97028p_firmwareMatch2.4.03_000

OR

cdatatec 97028p_firmwareMatch2.4.04_001

OR

cdatatec 97028p_firmwareMatch2.4.05_000

AND

cdatatec 97028pMatch-

Node

cdatatec 97042p_firmwareMatch1.2.2

OR

cdatatec 97042p_firmwareMatch2.4.03_000

OR

cdatatec 97042p_firmwareMatch2.4.04_001

OR

cdatatec 97042p_firmwareMatch2.4.05_000

AND

cdatatec 97042pMatch-

Node

cdatatec 97084p_firmwareMatch1.2.2

OR

cdatatec 97084p_firmwareMatch2.4.03_000

OR

cdatatec 97084p_firmwareMatch2.4.04_001

OR

cdatatec 97084p_firmwareMatch2.4.05_000

AND

cdatatec 97084pMatch-

Node

cdatatec 97168p_firmwareMatch1.2.2

OR

cdatatec 97168p_firmwareMatch2.4.03_000

OR

cdatatec 97168p_firmwareMatch2.4.04_001

OR

cdatatec 97168p_firmwareMatch2.4.05_000

AND

cdatatec 97168pMatch-

Node

cdatatec fd1002s_firmwareMatch1.2.2

OR

cdatatec fd1002s_firmwareMatch2.4.03_000

OR

cdatatec fd1002s_firmwareMatch2.4.04_001

OR

cdatatec fd1002s_firmwareMatch2.4.05_000

AND

cdatatec fd1002sMatch-

Node

cdatatec fd1104_firmwareMatch1.2.2

OR

cdatatec fd1104_firmwareMatch2.4.03_000

OR

cdatatec fd1104_firmwareMatch2.4.04_001

OR

cdatatec fd1104_firmwareMatch2.4.05_000

AND

cdatatec fd1104Match-

Node

cdatatec fd1104b_firmwareMatch1.2.2

OR

cdatatec fd1104b_firmwareMatch2.4.03_000

OR

cdatatec fd1104b_firmwareMatch2.4.04_001

OR

cdatatec fd1104b_firmwareMatch2.4.05_000

AND

cdatatec fd1104bMatch-

Node

cdatatec fd1104s_firmwareMatch1.2.2

OR

cdatatec fd1104s_firmwareMatch2.4.03_000

OR

cdatatec fd1104s_firmwareMatch2.4.04_001

OR

cdatatec fd1104s_firmwareMatch2.4.05_000

AND

cdatatec fd1104sMatch-

Node

cdatatec fd1104sn_firmwareMatch1.2.2

OR

cdatatec fd1104sn_firmwareMatch2.4.03_000

OR

cdatatec fd1104sn_firmwareMatch2.4.04_001

OR

cdatatec fd1104sn_firmwareMatch2.4.05_000

AND

cdatatec fd1104snMatch-

Node

cdatatec fd1108s_firmwareMatch1.2.2

OR

cdatatec fd1108s_firmwareMatch2.4.03_000

OR

cdatatec fd1108s_firmwareMatch2.4.04_001

OR

cdatatec fd1108s_firmwareMatch2.4.05_000

AND

cdatatec fd1108sMatch-

Node

cdatatec fd1204s-r2_firmwareMatch1.2.2

OR

cdatatec fd1204s-r2_firmwareMatch2.4.03_000

OR

cdatatec fd1204s-r2_firmwareMatch2.4.04_001

OR

cdatatec fd1204s-r2_firmwareMatch2.4.05_000

AND

cdatatec fd1204s-r2Match-

Node

cdatatec fd1204sn_firmwareMatch1.2.2

OR

cdatatec fd1204sn_firmwareMatch2.4.03_000

OR

cdatatec fd1204sn_firmwareMatch2.4.04_001

OR

cdatatec fd1204sn_firmwareMatch2.4.05_000

AND

cdatatec fd1204snMatch-

Node

cdatatec fd1204sn-r2_firmwareMatch1.2.2

OR

cdatatec fd1204sn-r2_firmwareMatch2.4.03_000

OR

cdatatec fd1204sn-r2_firmwareMatch2.4.04_001

OR

cdatatec fd1204sn-r2_firmwareMatch2.4.05_000

AND

cdatatec fd1204sn-r2Match-

Node

cdatatec fd1208s-r2_firmwareMatch1.2.2

OR

cdatatec fd1208s-r2_firmwareMatch2.4.03_000

OR

cdatatec fd1208s-r2_firmwareMatch2.4.04_001

OR

cdatatec fd1208s-r2_firmwareMatch2.4.05_000

AND

cdatatec fd1208s-r2Match-

Node

cdatatec fd1216s-r1_firmwareMatch1.2.2

OR

cdatatec fd1216s-r1_firmwareMatch2.4.03_000

OR

cdatatec fd1216s-r1_firmwareMatch2.4.04_001

OR

cdatatec fd1216s-r1_firmwareMatch2.4.05_000

AND

cdatatec fd1216s-r1Match-

Node

cdatatec fd1608gs_firmwareMatch1.2.2

OR

cdatatec fd1608gs_firmwareMatch2.4.03_000

OR

cdatatec fd1608gs_firmwareMatch2.4.04_001

OR

cdatatec fd1608gs_firmwareMatch2.4.05_000

AND

cdatatec fd1608gsMatch-

Node

cdatatec fd1608sn_firmwareMatch1.2.2

OR

cdatatec fd1608sn_firmwareMatch2.4.03_000

OR

cdatatec fd1608sn_firmwareMatch2.4.04_001

OR

cdatatec fd1608sn_firmwareMatch2.4.05_000

AND

cdatatec fd1608snMatch-

Node

cdatatec fd1616gs_firmwareMatch1.2.2

OR

cdatatec fd1616gs_firmwareMatch2.4.03_000

OR

cdatatec fd1616gs_firmwareMatch2.4.04_001

OR

cdatatec fd1616gs_firmwareMatch2.4.05_000

AND

cdatatec fd1616gsMatch-

Node

cdatatec fd1616sn_firmwareMatch1.2.2

OR

cdatatec fd1616sn_firmwareMatch2.4.03_000

OR

cdatatec fd1616sn_firmwareMatch2.4.04_001

OR

cdatatec fd1616sn_firmwareMatch2.4.05_000

AND

cdatatec fd1616snMatch-

Node

cdatatec fd8000_firmwareMatch1.2.2

OR

cdatatec fd8000_firmwareMatch2.4.03_000

OR

cdatatec fd8000_firmwareMatch2.4.04_001

OR

cdatatec fd8000_firmwareMatch2.4.05_000

AND

cdatatec fd8000Match-

Source	Link
pierrekim	www.pierrekim.github.io/blog/2020-07-07-cdata-olt-0day-vulnerabilities.html

21 Nov 2024 05:23Current

9.4High risk

Vulners AI Score9.4

CVSS 25

CVSS 3.19.8

EPSS0.00405

cve-2020-29058 cdata cleartext credentials web-server security vulnerability nvd