CVE-2020-29055

🗓️ 24 Nov 2020 21:15:11Reported by [email protected]Type

nvd

nvd🔗 web.nvd.nist.gov👁 16 Views

An issue discovered on multiple CDATA devices where remote management lacks SSL/TLS support, enabling interception of cleartext password

Reporter	Title	Published	Views	Family All 8
BDU FSTEC	The vulnerability of the CData optical line terminals 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 97168P, FD1002S, FD1104, FD1104B, FD1104S, FD1104SN, FD1108S, FD1204S-R2, FD1204SN, FD1204SN-R2, FD1208S-R2, FD1216S-R1, FD1608GS, FD1608SN, FD1616GS, FD1616SN, FD8000 – relates to the transmission of secret information in the form of plaintext. This vulnerability allows a attacker to execute a “man-in-the-middle” attack.	21 Apr 202100:00	–	bdu_fstec
Circl	CVE-2020-29055	25 Nov 202000:47	–	circl
CNNVD	Multiple CDATA product security vulnerabilities	24 Nov 202000:00	–	cnnvd
CVE	CVE-2020-29055	24 Nov 202021:00	–	cve
Cvelist	CVE-2020-29055	24 Nov 202021:00	–	cvelist
EUVD	EUVD-2020-21437	7 Oct 202500:30	–	euvd
Prion	Design/Logic Flaw	24 Nov 202021:15	–	prion
RedhatCVE	CVE-2020-29055	22 May 202516:36	–	redhatcve

NVD

Node

cdatatec 72408a_firmwareMatch1.2.2

OR

cdatatec 72408a_firmwareMatch2.4.03_000

OR

cdatatec 72408a_firmwareMatch2.4.04_001

OR

cdatatec 72408a_firmwareMatch2.4.05_000

AND

cdatatec 72408aMatch-

Node

cdatatec 9008a_firmwareMatch1.2.2

OR

cdatatec 9008a_firmwareMatch2.4.03_000

OR

cdatatec 9008a_firmwareMatch2.4.04_001

OR

cdatatec 9008a_firmwareMatch2.4.05_000

AND

cdatatec 9008aMatch-

Node

cdatatec 9016a_firmwareMatch1.2.2

OR

cdatatec 9016a_firmwareMatch2.4.03_000

OR

cdatatec 9016a_firmwareMatch2.4.04_001

OR

cdatatec 9016a_firmwareMatch2.4.05_000

AND

cdatatec 9016aMatch-

Node

cdatatec 92408a_firmwareMatch1.2.2

OR

cdatatec 92408a_firmwareMatch2.4.03_000

OR

cdatatec 92408a_firmwareMatch2.4.04_001

OR

cdatatec 92408a_firmwareMatch2.4.05_000

AND

cdatatec 92408aMatch-

Node

cdatatec 92416a_firmwareMatch1.2.2

OR

cdatatec 92416a_firmwareMatch2.4.03_000

OR

cdatatec 92416a_firmwareMatch2.4.04_001

OR

cdatatec 92416a_firmwareMatch2.4.05_000

AND

cdatatec 92416aMatch-

Node

cdatatec 9288_firmwareMatch1.2.2

OR

cdatatec 9288_firmwareMatch2.4.03_000

OR

cdatatec 9288_firmwareMatch2.4.04_001

OR

cdatatec 9288_firmwareMatch2.4.05_000

AND

cdatatec 9288Match-

Node

cdatatec 97016_firmwareMatch1.2.2

OR

cdatatec 97016_firmwareMatch2.4.03_000

OR

cdatatec 97016_firmwareMatch2.4.04_001

OR

cdatatec 97016_firmwareMatch2.4.05_000

AND

cdatatec 97016Match-

Node

cdatatec 97024p_firmwareMatch1.2.2

OR

cdatatec 97024p_firmwareMatch2.4.03_000

OR

cdatatec 97024p_firmwareMatch2.4.04_001

OR

cdatatec 97024p_firmwareMatch2.4.05_000

AND

cdatatec 97024pMatch-

Node

cdatatec 97028p_firmwareMatch1.2.2

OR

cdatatec 97028p_firmwareMatch2.4.03_000

OR

cdatatec 97028p_firmwareMatch2.4.04_001

OR

cdatatec 97028p_firmwareMatch2.4.05_000

AND

cdatatec 97028pMatch-

Node

cdatatec 97042p_firmwareMatch1.2.2

OR

cdatatec 97042p_firmwareMatch2.4.03_000

OR

cdatatec 97042p_firmwareMatch2.4.04_001

OR

cdatatec 97042p_firmwareMatch2.4.05_000

AND

cdatatec 97042pMatch-

Node

cdatatec 97084p_firmwareMatch1.2.2

OR

cdatatec 97084p_firmwareMatch2.4.03_000

OR

cdatatec 97084p_firmwareMatch2.4.04_001

OR

cdatatec 97084p_firmwareMatch2.4.05_000

AND

cdatatec 97084pMatch-

Node

cdatatec 97168p_firmwareMatch1.2.2

OR

cdatatec 97168p_firmwareMatch2.4.03_000

OR

cdatatec 97168p_firmwareMatch2.4.04_001

OR

cdatatec 97168p_firmwareMatch2.4.05_000

AND

cdatatec 97168pMatch-

Node

cdatatec fd1002s_firmwareMatch1.2.2

OR

cdatatec fd1002s_firmwareMatch2.4.03_000

OR

cdatatec fd1002s_firmwareMatch2.4.04_001

OR

cdatatec fd1002s_firmwareMatch2.4.05_000

AND

cdatatec fd1002sMatch-

Node

cdatatec fd1104_firmwareMatch1.2.2

OR

cdatatec fd1104_firmwareMatch2.4.03_000

OR

cdatatec fd1104_firmwareMatch2.4.04_001

OR

cdatatec fd1104_firmwareMatch2.4.05_000

AND

cdatatec fd1104Match-

Node

cdatatec fd1104b_firmwareMatch1.2.2

OR

cdatatec fd1104b_firmwareMatch2.4.03_000

OR

cdatatec fd1104b_firmwareMatch2.4.04_001

OR

cdatatec fd1104b_firmwareMatch2.4.05_000

AND

cdatatec fd1104bMatch-

Node

cdatatec fd1104s_firmwareMatch1.2.2

OR

cdatatec fd1104s_firmwareMatch2.4.03_000

OR

cdatatec fd1104s_firmwareMatch2.4.04_001

OR

cdatatec fd1104s_firmwareMatch2.4.05_000

AND

cdatatec fd1104sMatch-

Node

cdatatec fd1104sn_firmwareMatch1.2.2

OR

cdatatec fd1104sn_firmwareMatch2.4.03_000

OR

cdatatec fd1104sn_firmwareMatch2.4.04_001

OR

cdatatec fd1104sn_firmwareMatch2.4.05_000

AND

cdatatec fd1104snMatch-

Node

cdatatec fd1108s_firmwareMatch1.2.2

OR

cdatatec fd1108s_firmwareMatch2.4.03_000

OR

cdatatec fd1108s_firmwareMatch2.4.04_001

OR

cdatatec fd1108s_firmwareMatch2.4.05_000

AND

cdatatec fd1108sMatch-

Node

cdatatec fd1204s-r2_firmwareMatch1.2.2

OR

cdatatec fd1204s-r2_firmwareMatch2.4.03_000

OR

cdatatec fd1204s-r2_firmwareMatch2.4.04_001

OR

cdatatec fd1204s-r2_firmwareMatch2.4.05_000

AND

cdatatec fd1204s-r2Match-

Node

cdatatec fd1204sn_firmwareMatch1.2.2

OR

cdatatec fd1204sn_firmwareMatch2.4.03_000

OR

cdatatec fd1204sn_firmwareMatch2.4.04_001

OR

cdatatec fd1204sn_firmwareMatch2.4.05_000

AND

cdatatec fd1204snMatch-

Node

cdatatec fd1204sn-r2_firmwareMatch1.2.2

OR

cdatatec fd1204sn-r2_firmwareMatch2.4.03_000

OR

cdatatec fd1204sn-r2_firmwareMatch2.4.04_001

OR

cdatatec fd1204sn-r2_firmwareMatch2.4.05_000

AND

cdatatec fd1204sn-r2Match-

Node

cdatatec fd1208s-r2_firmwareMatch1.2.2

OR

cdatatec fd1208s-r2_firmwareMatch2.4.03_000

OR

cdatatec fd1208s-r2_firmwareMatch2.4.04_001

OR

cdatatec fd1208s-r2_firmwareMatch2.4.05_000

AND

cdatatec fd1208s-r2Match-

Node

cdatatec fd1216s-r1_firmwareMatch1.2.2

OR

cdatatec fd1216s-r1_firmwareMatch2.4.03_000

OR

cdatatec fd1216s-r1_firmwareMatch2.4.04_001

OR

cdatatec fd1216s-r1_firmwareMatch2.4.05_000

AND

cdatatec fd1216s-r1Match-

Node

cdatatec fd1608gs_firmwareMatch1.2.2

OR

cdatatec fd1608gs_firmwareMatch2.4.03_000

OR

cdatatec fd1608gs_firmwareMatch2.4.04_001

OR

cdatatec fd1608gs_firmwareMatch2.4.05_000

AND

cdatatec fd1608gsMatch-

Node

cdatatec fd1608sn_firmwareMatch1.2.2

OR

cdatatec fd1608sn_firmwareMatch2.4.03_000

OR

cdatatec fd1608sn_firmwareMatch2.4.04_001

OR

cdatatec fd1608sn_firmwareMatch2.4.05_000

AND

cdatatec fd1608snMatch-

Node

cdatatec fd1616gs_firmwareMatch1.2.2

OR

cdatatec fd1616gs_firmwareMatch2.4.03_000

OR

cdatatec fd1616gs_firmwareMatch2.4.04_001

OR

cdatatec fd1616gs_firmwareMatch2.4.05_000

AND

cdatatec fd1616gsMatch-

Node

cdatatec fd1616sn_firmwareMatch1.2.2

OR

cdatatec fd1616sn_firmwareMatch2.4.03_000

OR

cdatatec fd1616sn_firmwareMatch2.4.04_001

OR

cdatatec fd1616sn_firmwareMatch2.4.05_000

AND

cdatatec fd1616snMatch-

Node

cdatatec fd8000_firmwareMatch1.2.2

OR

cdatatec fd8000_firmwareMatch2.4.03_000

OR

cdatatec fd8000_firmwareMatch2.4.04_001

OR

cdatatec fd8000_firmwareMatch2.4.05_000

AND

cdatatec fd8000Match-

Source	Link
pierrekim	www.pierrekim.github.io/blog/2020-07-07-cdata-olt-0day-vulnerabilities.html

21 Nov 2024 05:23Current

5.7Medium risk

Vulners AI Score5.7

CVSS 24.3

CVSS 3.15.9

EPSS0.00658

cdata devices remote management ssl/tls support interception cleartext passwords man-in-the-middle