CVE-2020-29062

🗓️ 24 Nov 2020 21:15:12Reported by [email protected]Type

nvd

nvd🔗 web.nvd.nist.gov👁 18 Views

Issue discovered on multiple CDATA devices with default blank password for guest accoun

Reporter	Title	Published	Views	Family All 9
BDU FSTEC	The vulnerability of the CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 97168P, FD1002S, FD1104, FD1104B, FD1104S, FD1104SN, FD1108S, FD1204S-R2, FD1204SN, FD1204SN-R2, FD1208S-R2, FD1216S-R1, FD1608GS, FD1608SN, FD1616GS, FD1616SN, FD8000 optical line terminals is related to rigid encoding of registration data. This vulnerability allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.	21 Apr 202100:00	–	bdu_fstec
Circl	CVE-2020-29062	25 Nov 202000:47	–	circl
CNNVD	Multiple CDATA product trust management issue vulnerabilities	24 Nov 202000:00	–	cnnvd
CVE	CVE-2020-29062	24 Nov 202020:58	–	cve
Cvelist	CVE-2020-29062	24 Nov 202020:58	–	cvelist
EUVD	EUVD-2020-21444	7 Oct 202500:30	–	euvd
OSV	CVE-2020-29062	24 Nov 202021:15	–	osv
Prion	Default credentials	24 Nov 202021:15	–	prion
RedhatCVE	CVE-2020-29062	22 May 202517:02	–	redhatcve

NVD

Node

cdatatec 72408a_firmwareMatch1.2.2

OR

cdatatec 72408a_firmwareMatch2.4.03_000

OR

cdatatec 72408a_firmwareMatch2.4.04_001

OR

cdatatec 72408a_firmwareMatch2.4.05_000

AND

cdatatec 72408aMatch-

Node

cdatatec 9008a_firmwareMatch1.2.2

OR

cdatatec 9008a_firmwareMatch2.4.03_000

OR

cdatatec 9008a_firmwareMatch2.4.04_001

OR

cdatatec 9008a_firmwareMatch2.4.05_000

AND

cdatatec 9008aMatch-

Node

cdatatec 9016a_firmwareMatch1.2.2

OR

cdatatec 9016a_firmwareMatch2.4.03_000

OR

cdatatec 9016a_firmwareMatch2.4.04_001

OR

cdatatec 9016a_firmwareMatch2.4.05_000

AND

cdatatec 9016aMatch-

Node

cdatatec 92408a_firmwareMatch1.2.2

OR

cdatatec 92408a_firmwareMatch2.4.03_000

OR

cdatatec 92408a_firmwareMatch2.4.04_001

OR

cdatatec 92408a_firmwareMatch2.4.05_000

AND

cdatatec 92408aMatch-

Node

cdatatec 92416a_firmwareMatch1.2.2

OR

cdatatec 92416a_firmwareMatch2.4.03_000

OR

cdatatec 92416a_firmwareMatch2.4.04_001

OR

cdatatec 92416a_firmwareMatch2.4.05_000

AND

cdatatec 92416aMatch-

Node

cdatatec 9288_firmwareMatch1.2.2

OR

cdatatec 9288_firmwareMatch2.4.03_000

OR

cdatatec 9288_firmwareMatch2.4.04_001

OR

cdatatec 9288_firmwareMatch2.4.05_000

AND

cdatatec 9288Match-

Node

cdatatec 97016_firmwareMatch1.2.2

OR

cdatatec 97016_firmwareMatch2.4.03_000

OR

cdatatec 97016_firmwareMatch2.4.04_001

OR

cdatatec 97016_firmwareMatch2.4.05_000

AND

cdatatec 97016Match-

Node

cdatatec 97024p_firmwareMatch1.2.2

OR

cdatatec 97024p_firmwareMatch2.4.03_000

OR

cdatatec 97024p_firmwareMatch2.4.04_001

OR

cdatatec 97024p_firmwareMatch2.4.05_000

AND

cdatatec 97024pMatch-

Node

cdatatec 97028p_firmwareMatch1.2.2

OR

cdatatec 97028p_firmwareMatch2.4.03_000

OR

cdatatec 97028p_firmwareMatch2.4.04_001

OR

cdatatec 97028p_firmwareMatch2.4.05_000

AND

cdatatec 97028pMatch-

Node

cdatatec 97042p_firmwareMatch1.2.2

OR

cdatatec 97042p_firmwareMatch2.4.03_000

OR

cdatatec 97042p_firmwareMatch2.4.04_001

OR

cdatatec 97042p_firmwareMatch2.4.05_000

AND

cdatatec 97042pMatch-

Node

cdatatec 97084p_firmwareMatch1.2.2

OR

cdatatec 97084p_firmwareMatch2.4.03_000

OR

cdatatec 97084p_firmwareMatch2.4.04_001

OR

cdatatec 97084p_firmwareMatch2.4.05_000

AND

cdatatec 97084pMatch-

Node

cdatatec 97168p_firmwareMatch1.2.2

OR

cdatatec 97168p_firmwareMatch2.4.03_000

OR

cdatatec 97168p_firmwareMatch2.4.04_001

OR

cdatatec 97168p_firmwareMatch2.4.05_000

AND

cdatatec 97168pMatch-

Node

cdatatec fd1002s_firmwareMatch1.2.2

OR

cdatatec fd1002s_firmwareMatch2.4.03_000

OR

cdatatec fd1002s_firmwareMatch2.4.04_001

OR

cdatatec fd1002s_firmwareMatch2.4.05_000

AND

cdatatec fd1002sMatch-

Node

cdatatec fd1104_firmwareMatch1.2.2

OR

cdatatec fd1104_firmwareMatch2.4.03_000

OR

cdatatec fd1104_firmwareMatch2.4.04_001

OR

cdatatec fd1104_firmwareMatch2.4.05_000

AND

cdatatec fd1104Match-

Node

cdatatec fd1104b_firmwareMatch1.2.2

OR

cdatatec fd1104b_firmwareMatch2.4.03_000

OR

cdatatec fd1104b_firmwareMatch2.4.04_001

OR

cdatatec fd1104b_firmwareMatch2.4.05_000

AND

cdatatec fd1104bMatch-

Node

cdatatec fd1104s_firmwareMatch1.2.2

OR

cdatatec fd1104s_firmwareMatch2.4.03_000

OR

cdatatec fd1104s_firmwareMatch2.4.04_001

OR

cdatatec fd1104s_firmwareMatch2.4.05_000

AND

cdatatec fd1104sMatch-

Node

cdatatec fd1104sn_firmwareMatch1.2.2

OR

cdatatec fd1104sn_firmwareMatch2.4.03_000

OR

cdatatec fd1104sn_firmwareMatch2.4.04_001

OR

cdatatec fd1104sn_firmwareMatch2.4.05_000

AND

cdatatec fd1104snMatch-

Node

cdatatec fd1108s_firmwareMatch1.2.2

OR

cdatatec fd1108s_firmwareMatch2.4.03_000

OR

cdatatec fd1108s_firmwareMatch2.4.04_001

OR

cdatatec fd1108s_firmwareMatch2.4.05_000

AND

cdatatec fd1108sMatch-

Node

cdatatec fd1204s-r2_firmwareMatch1.2.2

OR

cdatatec fd1204s-r2_firmwareMatch2.4.03_000

OR

cdatatec fd1204s-r2_firmwareMatch2.4.04_001

OR

cdatatec fd1204s-r2_firmwareMatch2.4.05_000

AND

cdatatec fd1204s-r2Match-

Node

cdatatec fd1204sn_firmwareMatch1.2.2

OR

cdatatec fd1204sn_firmwareMatch2.4.03_000

OR

cdatatec fd1204sn_firmwareMatch2.4.04_001

OR

cdatatec fd1204sn_firmwareMatch2.4.05_000

AND

cdatatec fd1204snMatch-

Node

cdatatec fd1204sn-r2_firmwareMatch1.2.2

OR

cdatatec fd1204sn-r2_firmwareMatch2.4.03_000

OR

cdatatec fd1204sn-r2_firmwareMatch2.4.04_001

OR

cdatatec fd1204sn-r2_firmwareMatch2.4.05_000

AND

cdatatec fd1204sn-r2Match-

Node

cdatatec fd1208s-r2_firmwareMatch1.2.2

OR

cdatatec fd1208s-r2_firmwareMatch2.4.03_000

OR

cdatatec fd1208s-r2_firmwareMatch2.4.04_001

OR

cdatatec fd1208s-r2_firmwareMatch2.4.05_000

AND

cdatatec fd1208s-r2Match-

Node

cdatatec fd1216s-r1_firmwareMatch1.2.2

OR

cdatatec fd1216s-r1_firmwareMatch2.4.03_000

OR

cdatatec fd1216s-r1_firmwareMatch2.4.04_001

OR

cdatatec fd1216s-r1_firmwareMatch2.4.05_000

AND

cdatatec fd1216s-r1Match-

Node

cdatatec fd1608gs_firmwareMatch1.2.2

OR

cdatatec fd1608gs_firmwareMatch2.4.03_000

OR

cdatatec fd1608gs_firmwareMatch2.4.04_001

OR

cdatatec fd1608gs_firmwareMatch2.4.05_000

AND

cdatatec fd1608gsMatch-

Node

cdatatec fd1608sn_firmwareMatch1.2.2

OR

cdatatec fd1608sn_firmwareMatch2.4.03_000

OR

cdatatec fd1608sn_firmwareMatch2.4.04_001

OR

cdatatec fd1608sn_firmwareMatch2.4.05_000

AND

cdatatec fd1608snMatch-

Node

cdatatec fd1616gs_firmwareMatch1.2.2

OR

cdatatec fd1616gs_firmwareMatch2.4.03_000

OR

cdatatec fd1616gs_firmwareMatch2.4.04_001

OR

cdatatec fd1616gs_firmwareMatch2.4.05_000

AND

cdatatec fd1616gsMatch-

Node

cdatatec fd1616sn_firmwareMatch1.2.2

OR

cdatatec fd1616sn_firmwareMatch2.4.03_000

OR

cdatatec fd1616sn_firmwareMatch2.4.04_001

OR

cdatatec fd1616sn_firmwareMatch2.4.05_000

AND

cdatatec fd1616snMatch-

Node

cdatatec fd8000_firmwareMatch1.2.2

OR

cdatatec fd8000_firmwareMatch2.4.03_000

OR

cdatatec fd8000_firmwareMatch2.4.04_001

OR

cdatatec fd8000_firmwareMatch2.4.05_000

AND

cdatatec fd8000Match-

Source	Link
pierrekim	www.pierrekim.github.io/blog/2020-07-07-cdata-olt-0day-vulnerabilities.html

21 Nov 2024 05:23Current

9.6High risk

Vulners AI Score9.6

CVSS 27.5

CVSS 3.19.8

EPSS0.00377

cdata devices default password guest account security issue