CVE-2020-29062

An issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 97168P, FD1002S, FD1104, FD1104B, FD1104S, FD1104SN, FD1108S, FD1204S-R2, FD1204SN, FD1204SN-R2, FD1208S-R2, FD1216S-R1, FD1608GS, FD1608SN, FD1616GS, FD1616SN, and FD8000 devices. There is a default blank password for the guest account.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2020-11-24

Last modified

2024-08-04

Weaknesses

CWE-798

Affected products

• 72408a Firmware (Cdatatec)
• 9008a Firmware (Cdatatec)
• 9016a Firmware (Cdatatec)
• 92408a Firmware (Cdatatec)
• 92416a Firmware (Cdatatec)
• 9288 Firmware (Cdatatec)
• 97016 Firmware (Cdatatec)
• 97024p Firmware (Cdatatec)
• 97028p Firmware (Cdatatec)
• 97042p Firmware (Cdatatec)
• 97084p Firmware (Cdatatec)
• 97168p Firmware (Cdatatec)
• Fd1002s Firmware (Cdatatec)
• Fd1104 Firmware (Cdatatec)
• Fd1104b Firmware (Cdatatec)
• Fd1104s Firmware (Cdatatec)
• Fd1104sn Firmware (Cdatatec)
• Fd1108s Firmware (Cdatatec)
• Fd1204s-r2 Firmware (Cdatatec)
• Fd1204sn-r2 Firmware (Cdatatec)
• Fd1204sn Firmware (Cdatatec)
• Fd1208s-r2 Firmware (Cdatatec)
• Fd1216s-r1 Firmware (Cdatatec)
• Fd1608gs Firmware (Cdatatec)
• Fd1608sn Firmware (Cdatatec)
• Fd1616gs Firmware (Cdatatec)
• Fd1616sn Firmware (Cdatatec)
• Fd8000 Firmware (Cdatatec)

References

• https://pierrekim.github.io/blog/2020-07-07-cdata-olt-0day-vulnerabilities.html