CVE-2020-29056

🗓️ 24 Nov 2020 21:15:11Reported by [email protected]Type

nvd

nvd🔗 web.nvd.nist.gov👁 22 Views

Issue discovered on multiple CDATA devices allowing escape from shell and acquiring root privileges via TFTP download configuratio

Reporter	Title	Published	Views	Family All 9
BDU FSTEC	The vulnerability of the CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 97168P, FD1002S, FD1104, FD1104B, FD1104S, FD1104SN, FD1108S, FD1204S-R2, FD1204SN, FD1204SN-R2, FD1208S-R2, FD1216S-R1, FD1608GS, FD1608SN, FD1616GS, FD1616SN, FD8000 are related to the failure to take measures for data cleaning at the management level. This allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.	21 Apr 202100:00	–	bdu_fstec
Circl	CVE-2020-29056	25 Nov 202000:47	–	circl
CNNVD	Command Injection Vulnerability in Multiple CDATA Products	24 Nov 202000:00	–	cnnvd
CVE	CVE-2020-29056	24 Nov 202021:00	–	cve
Cvelist	CVE-2020-29056	24 Nov 202021:00	–	cvelist
EUVD	EUVD-2020-21438	7 Oct 202500:30	–	euvd
OSV	CVE-2020-29056	24 Nov 202021:15	–	osv
Prion	Default configuration	24 Nov 202021:15	–	prion
RedhatCVE	CVE-2020-29056	22 May 202517:45	–	redhatcve

NVD

Node

cdatatec 72408a_firmwareMatch1.2.2

OR

cdatatec 72408a_firmwareMatch2.4.03_000

OR

cdatatec 72408a_firmwareMatch2.4.04_001

OR

cdatatec 72408a_firmwareMatch2.4.05_000

AND

cdatatec 72408aMatch-

Node

cdatatec 9008a_firmwareMatch1.2.2

OR

cdatatec 9008a_firmwareMatch2.4.03_000

OR

cdatatec 9008a_firmwareMatch2.4.04_001

OR

cdatatec 9008a_firmwareMatch2.4.05_000

AND

cdatatec 9008aMatch-

Node

cdatatec 9016a_firmwareMatch1.2.2

OR

cdatatec 9016a_firmwareMatch2.4.03_000

OR

cdatatec 9016a_firmwareMatch2.4.04_001

OR

cdatatec 9016a_firmwareMatch2.4.05_000

AND

cdatatec 9016aMatch-

Node

cdatatec 92408a_firmwareMatch1.2.2

OR

cdatatec 92408a_firmwareMatch2.4.03_000

OR

cdatatec 92408a_firmwareMatch2.4.04_001

OR

cdatatec 92408a_firmwareMatch2.4.05_000

AND

cdatatec 92408aMatch-

Node

cdatatec 92416a_firmwareMatch1.2.2

OR

cdatatec 92416a_firmwareMatch2.4.03_000

OR

cdatatec 92416a_firmwareMatch2.4.04_001

OR

cdatatec 92416a_firmwareMatch2.4.05_000

AND

cdatatec 92416aMatch-

Node

cdatatec 9288_firmwareMatch1.2.2

OR

cdatatec 9288_firmwareMatch2.4.03_000

OR

cdatatec 9288_firmwareMatch2.4.04_001

OR

cdatatec 9288_firmwareMatch2.4.05_000

AND

cdatatec 9288Match-

Node

cdatatec 97016_firmwareMatch1.2.2

OR

cdatatec 97016_firmwareMatch2.4.03_000

OR

cdatatec 97016_firmwareMatch2.4.04_001

OR

cdatatec 97016_firmwareMatch2.4.05_000

AND

cdatatec 97016Match-

Node

cdatatec 97024p_firmwareMatch1.2.2

OR

cdatatec 97024p_firmwareMatch2.4.03_000

OR

cdatatec 97024p_firmwareMatch2.4.04_001

OR

cdatatec 97024p_firmwareMatch2.4.05_000

AND

cdatatec 97024pMatch-

Node

cdatatec 97028p_firmwareMatch1.2.2

OR

cdatatec 97028p_firmwareMatch2.4.03_000

OR

cdatatec 97028p_firmwareMatch2.4.04_001

OR

cdatatec 97028p_firmwareMatch2.4.05_000

AND

cdatatec 97028pMatch-

Node

cdatatec 97042p_firmwareMatch1.2.2

OR

cdatatec 97042p_firmwareMatch2.4.03_000

OR

cdatatec 97042p_firmwareMatch2.4.04_001

OR

cdatatec 97042p_firmwareMatch2.4.05_000

AND

cdatatec 97042pMatch-

Node

cdatatec 97084p_firmwareMatch1.2.2

OR

cdatatec 97084p_firmwareMatch2.4.03_000

OR

cdatatec 97084p_firmwareMatch2.4.04_001

OR

cdatatec 97084p_firmwareMatch2.4.05_000

AND

cdatatec 97084pMatch-

Node

cdatatec 97168p_firmwareMatch1.2.2

OR

cdatatec 97168p_firmwareMatch2.4.03_000

OR

cdatatec 97168p_firmwareMatch2.4.04_001

OR

cdatatec 97168p_firmwareMatch2.4.05_000

AND

cdatatec 97168pMatch-

Node

cdatatec fd1002s_firmwareMatch1.2.2

OR

cdatatec fd1002s_firmwareMatch2.4.03_000

OR

cdatatec fd1002s_firmwareMatch2.4.04_001

OR

cdatatec fd1002s_firmwareMatch2.4.05_000

AND

cdatatec fd1002sMatch-

Node

cdata fd1104_firmwareMatch2.4.03_000

OR

cdatatec fd1104_firmwareMatch1.2.2

OR

cdatatec fd1104_firmwareMatch2.4.04_001

OR

cdatatec fd1104_firmwareMatch2.4.05_000

AND

cdatatec fd1104Match-

Node

cdatatec fd1104b_firmwareMatch1.2.2

OR

cdatatec fd1104b_firmwareMatch2.4.03_000

OR

cdatatec fd1104b_firmwareMatch2.4.04_001

OR

cdatatec fd1104b_firmwareMatch2.4.05_000

AND

cdatatec fd1104bMatch-

Node

cdatatec fd1104s_firmwareMatch1.2.2

OR

cdatatec fd1104s_firmwareMatch2.4.03_000

OR

cdatatec fd1104s_firmwareMatch2.4.04_001

OR

cdatatec fd1104s_firmwareMatch2.4.05_000

AND

cdatatec fd1104sMatch-

Node

cdatatec fd1104sn_firmwareMatch1.2.2

OR

cdatatec fd1104sn_firmwareMatch2.4.03_000

OR

cdatatec fd1104sn_firmwareMatch2.4.04_001

OR

cdatatec fd1104sn_firmwareMatch2.4.05_000

AND

cdatatec fd1104snMatch-

Node

cdatatec fd1108s_firmwareMatch1.2.2

OR

cdatatec fd1108s_firmwareMatch2.4.03_000

OR

cdatatec fd1108s_firmwareMatch2.4.04_001

OR

cdatatec fd1108s_firmwareMatch2.4.05_000

AND

cdatatec fd1108sMatch-

Node

cdatatec fd1204s-r2_firmwareMatch1.2.2

OR

cdatatec fd1204s-r2_firmwareMatch2.4.03_000

OR

cdatatec fd1204s-r2_firmwareMatch2.4.04_001

OR

cdatatec fd1204s-r2_firmwareMatch2.4.05_000

AND

cdatatec fd1204s-r2Match-

Node

cdatatec fd1204sn_firmwareMatch1.2.2

OR

cdatatec fd1204sn_firmwareMatch2.4.03_000

OR

cdatatec fd1204sn_firmwareMatch2.4.04_001

OR

cdatatec fd1204sn_firmwareMatch2.4.05_000

AND

cdatatec fd1204snMatch-

Node

cdatatec fd1204sn-r2_firmwareMatch1.2.2

OR

cdatatec fd1204sn-r2_firmwareMatch2.4.03_000

OR

cdatatec fd1204sn-r2_firmwareMatch2.4.04_001

OR

cdatatec fd1204sn-r2_firmwareMatch2.4.05_000

AND

cdatatec fd1204sn-r2Match-

Node

cdatatec fd1208s-r2_firmwareMatch1.2.2

OR

cdatatec fd1208s-r2_firmwareMatch2.4.03_000

OR

cdatatec fd1208s-r2_firmwareMatch2.4.04_001

OR

cdatatec fd1208s-r2_firmwareMatch2.4.05_000

AND

cdatatec fd1208s-r2Match-

Node

cdatatec fd1216s-r1_firmwareMatch1.2.2

OR

cdatatec fd1216s-r1_firmwareMatch2.4.03_000

OR

cdatatec fd1216s-r1_firmwareMatch2.4.04_001

OR

cdatatec fd1216s-r1_firmwareMatch2.4.05_000

AND

cdatatec fd1216s-r1Match-

Node

cdatatec fd1608gs_firmwareMatch1.2.2

OR

cdatatec fd1608gs_firmwareMatch2.4.03_000

OR

cdatatec fd1608gs_firmwareMatch2.4.04_001

OR

cdatatec fd1608gs_firmwareMatch2.4.05_000

AND

cdatatec fd1608gsMatch-

Node

cdatatec fd1608sn_firmwareMatch1.2.2

OR

cdatatec fd1608sn_firmwareMatch2.4.03_000

OR

cdatatec fd1608sn_firmwareMatch2.4.04_001

OR

cdatatec fd1608sn_firmwareMatch2.4.05_000

AND

cdatatec fd1608snMatch-

Node

cdatatec fd1616gs_firmwareMatch1.2.2

OR

cdatatec fd1616gs_firmwareMatch2.4.03_000

OR

cdatatec fd1616gs_firmwareMatch2.4.04_001

OR

cdatatec fd1616gs_firmwareMatch2.4.05_000

AND

cdatatec fd1616gsMatch-

Node

cdatatec fd1616sn_firmwareMatch1.2.2

OR

cdatatec fd1616sn_firmwareMatch2.4.03_000

OR

cdatatec fd1616sn_firmwareMatch2.4.04_001

OR

cdatatec fd1616sn_firmwareMatch2.4.05_000

AND

cdatatec fd1616snMatch-

Node

cdatatec fd8000_firmwareMatch1.2.2

OR

cdatatec fd8000_firmwareMatch2.4.03_000

OR

cdatatec fd8000_firmwareMatch2.4.04_001

OR

cdatatec fd8000_firmwareMatch2.4.05_000

AND

cdatatec fd8000Match-

Source	Link
pierrekim	www.pierrekim.github.io/blog/2020-07-07-cdata-olt-0day-vulnerabilities.html

17 Jun 2026 03:11Current

9.5High risk

Vulners AI Score9.5

CVSS 3.19.8

CVSS 210

EPSS0.01994

cdata devices escape from shell root privileges tftp download configuration