CVE-2020-29378

An issue was discovered on V-SOL V1600D V2.03.69 and V2.03.57, V1600D4L V1.01.49, V1600D-MINI V1.01.48, V1600G1 V2.0.7 and V1.9.7, and V1600G2 V1.1.4 OLT devices. It is possible to elevate the privilege of a CLI user to full administrative access by using the password !j@ly$z%x6x7q8c9z for the...

CVE-2020-29378

The CVE-2020-29378 entry affects V-SOL OLT devices (V1600D, V1600D4L, V1600D-MINI, V1600G1, V1600G2 with listed firmware versions). Root cause: improper handling of the enable password allows a CLI user to elevate privileges to full administrative access. Impact: attacker can gain high-privilege ...

CVE-2020-29379

CVE-2020-29379 affects V-SOL V1600D4L V1.01.49 and V1600D-MINI V1.01.48 OLT devices. The update process launches a telnetd -l /bin/sh during firmware updates, which can be accessed via TELNET without authentication. This creates unauthenticated access to a shell, enabling potential local/remote m...

CVE-2020-29380

The CVE-2020-29380 affects several V-SOL OLT devices (V1600D/V1600D4L/V1600D-MINI/V1600G1/V1600G2 with versions listed) where TELNET is offered by default and SSH is not consistently available. The root issue is cleartext password transmission enabling interception and a man-in-the-middle attack ...

CVE-2020-29380

An issue was discovered on V-SOL V1600D V2.03.69 and V2.03.57, V1600D4L V1.01.49, V1600D-MINI V1.01.48, V1600G1 V2.0.7 and V1.9.7, and V1600G2 V1.1.4 OLT devices. TELNET is offered by default but SSH is not always available. An attacker can intercept passwords sent in cleartext and conduct a...

CVE-2020-29381

An issue was discovered on V-SOL V1600D V2.03.69 and V2.03.57, V1600D4L V1.01.49, V1600D-MINI V1.01.48, V1600G1 V2.0.7 and V1.9.7, and V1600G2 V1.1.4 OLT devices. Command injection can occur in "upload tftp syslog" and "upload tftp configuration" in the CLI via a crafted filename...

CVE-2020-29381

CVE-2020-29381 affects multiple V-SOL OLT models: V1600D (V2.03.69/2.03.57), V1600D4L (V1.01.49), V1600D-MINI (V1.01.48), V1600G1 (V2.0.7 and V1.9.7), and V1600G2 (V1.1.4). Affected component/function: CLI handling of file uploads; vulnerability arises from a crafted filename triggering a command...

CVE-2020-29382

An issue was discovered on V-SOL V1600D V2.03.69 and V2.03.57, V1600G1 V2.0.7 and V1.9.7, and V1600G2 V1.1.4 OLT devices. A hardcoded RSA private key specific to V1600D, V1600G1, and V1600G2 is contained in the firmware images...

CVE-2020-29382

CVE-2020-29382 affects V-SOL OLT devices: V1600D (firmware 2.03.69/2.03.57), V1600G1 (2.0.7/1.9.7), and V1600G2 (1.1.4). Root cause: a hardcoded RSA private key embedded in the firmware images. Impact: potential exposure/leak of the private key with confidentiality, integrity, and availability im...

CVE-2020-29383

The CVE-2020-29383 entry concerns V-SOL V1600D4L V1.01.49 and V1600D-MINI V1.01.48 OLT devices that contain a hardcoded RSA private key in the firmware images. This root cause is a hardcoded credential embedded in affected firmware, exposing risks to confidentiality and integrity (per CVSS3.1: HI...

V-SOL V1600D Trust Management Issue Vulnerability

VIACOM V-Solution V1600D is a Gpon-enabled terminal device for connecting fiber optic trunks from VIACOM, China. A security vulnerability exists in the V-SOL V1600D that originates from comparing the string K0LTdi@gnos312$ with a password that can be supplied by a remote attacker exploiting the...

Security Advisory - Buffer Overflow Vulnerability in Some Huawei Products

There is a buffer overflow vulnerability in some Huawei products. The vulnerability can be exploited by an attacker to perform remote code execution on the affected products when the affected product functions as an optical line terminal OLT. Vulnerability ID: HWPSIRT-2019-09333 This vulnerabilit...

CVE-2019-19148

Tellabs Optical Line Terminal OLT 1150 devices allow Remote Command Execution via the -l option to TELNET or SSH. Tellabs has addressed this issue in the SR30.1 and SR31.1 release on February 18, 2020...

Command injection

Tellabs Optical Line Terminal OLT 1150 devices allow Remote Command Execution via the -l option to TELNET or SSH. Tellabs has addressed this issue in the SR30.1 and SR31.1 release on February 18, 2020...

CVE-2019-19148

CVE-2019-19148 affects Tellabs Optical Line Terminal (OLT) 1150 devices, where Remote Command Execution is possible via the -l option on TELNET or SSH. The root cause is an exploitable command path enabled by -l that allows execution of commands with the attacker-supplied input. Tellabs addressed...

CVE-2019-19148

Tellabs Optical Line Terminal OLT 1150 devices allow Remote Command Execution via the -l option to TELNET or SSH. Tellabs has addressed this issue in the SR30.1 and SR31.1 release on February 18, 2020...

V-SOL GPON / EPON OLT Platform Cross-Site Scripting Vulnerability

V-SOL GPON is a network switch device. A cross-site scripting vulnerability exists in the V-SOL GPON / EPON OLT platform v2.03, which can be exploited by attackers to execute arbitrary HTML and script code...

V-SOL GPON/EPON OLT Platform 2.03 - Unauthenticated Configuration Download Vulnerability

Exploit for hardware platform in category web applications Title: V-SOL GPON/EPON OLT Platform 2.03 - Unauthenticated Configuration Download Author: LiquidWorm Vendor: Guangzhou V-SOLUTION Electronic Technology Co., Ltd. Product web page: https://www.vsolcn.com Affected version: V2.03.62RIPv6...

V-SOL GPONEPON OLT Platform 2.03 - Unauthenticated Configuration Download

V-SOL GPONEPON OLT Platform 2.03 - Unauthenticated Configuration Download Title: V-SOL GPON/EPON OLT Platform 2.03 - Unauthenticated Configuration Download Date: 2019-09-27 Author: LiquidWorm Vendor: Guangzhou V-SOLUTION Electronic Technology Co., Ltd. Product web page: https://www.vsolcn.com...

V-SOL GPONEPON OLT Platform 2.03 - Remote Privilege Escalation

V-SOL GPONEPON OLT Platform 2.03 - Remote Privilege Escalation Exploit Title: V-SOL GPON/EPON OLT Platform 2.03 - Remote Privilege Escalation Author: LiquidWorm Discovery Date: 2019-09-26 Vendor: Guangzhou V-SOLUTION Electronic Technology Co., Ltd. Product web page: https://www.vsolcn.com Tested...