CVE-2020-29054
Critical
Description
An issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 97168P, FD1002S, FD1104, FD1104B, FD1104S, FD1104SN, FD1108S, FD1204S-R2, FD1204SN, FD1204SN-R2, FD1208S-R2, FD1216S-R1, FD1608GS, FD1608SN, FD1616GS, FD1616SN, and FD8000 devices. Attackers can use "show system infor" to discover cleartext TELNET credentials.
SeverityCritical
CVSS9.8
Exploit probability—
ProductCdatatec 72408a Firmware
PublishedNov 24, 2020
First seenNov 24, 2020
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cdatatec 72408a_firmware | 1.2.2, 2.4.03_000, 2.4.04_001, 2.4.05_000 | — |
| cdatatec 9008a_firmware | 1.2.2, 2.4.03_000, 2.4.04_001, 2.4.05_000 | — |
| cdatatec 9016a_firmware | 1.2.2, 2.4.03_000, 2.4.04_001, 2.4.05_000 | — |
| cdatatec 92408a_firmware | 1.2.2, 2.4.03_000, 2.4.04_001, 2.4.05_000 | — |
| cdatatec 92416a_firmware | 1.2.2, 2.4.03_000, 2.4.04_001, 2.4.05_000 | — |
| cdatatec 9288_firmware | 1.2.2, 2.4.03_000, 2.4.04_001, 2.4.05_000 | — |
| cdatatec 97016_firmware | 1.2.2, 2.4.03_000, 2.4.04_001, 2.4.05_000 | — |
| cdatatec 97024p_firmware | 1.2.2, 2.4.03_000, 2.4.04_001, 2.4.05_000 | — |
| cdatatec 97028p_firmware | 1.2.2, 2.4.03_000, 2.4.04_001, 2.4.05_000 | — |
| cdatatec 97042p_firmware | 1.2.2, 2.4.03_000, 2.4.04_001, 2.4.05_000 | — |
| cdatatec 97084p_firmware | 1.2.2, 2.4.03_000, 2.4.04_001, 2.4.05_000 | — |
| cdatatec 97168p_firmware | 1.2.2, 2.4.03_000, 2.4.04_001, 2.4.05_000 | — |
| cdatatec fd1002s_firmware | 1.2.2, 2.4.03_000, 2.4.04_001, 2.4.05_000 | — |
| cdatatec fd1104_firmware | 1.2.2, 2.4.03_000, 2.4.04_001, 2.4.05_000 | — |
| cdatatec fd1104b_firmware | 1.2.2, 2.4.03_000, 2.4.04_001, 2.4.05_000 | — |
| cdatatec fd1104s_firmware | 1.2.2, 2.4.03_000, 2.4.04_001, 2.4.05_000 | — |
| cdatatec fd1104sn_firmware | 1.2.2, 2.4.03_000, 2.4.04_001, 2.4.05_000 | — |
| cdatatec fd1108s_firmware | 1.2.2, 2.4.03_000, 2.4.04_001, 2.4.05_000 | — |
| cdatatec fd1204s-r2_firmware | 1.2.2, 2.4.03_000, 2.4.04_001, 2.4.05_000 | — |
| cdatatec fd1204sn_firmware | 1.2.2, 2.4.03_000, 2.4.04_001, 2.4.05_000 | — |
| cdatatec fd1204sn-r2_firmware | 1.2.2, 2.4.03_000, 2.4.04_001, 2.4.05_000 | — |
| cdatatec fd1208s-r2_firmware | 1.2.2, 2.4.03_000, 2.4.04_001, 2.4.05_000 | — |
| cdatatec fd1216s-r1_firmware | 1.2.2, 2.4.03_000, 2.4.04_001, 2.4.05_000 | — |
| cdatatec fd1608gs_firmware | 1.2.2, 2.4.03_000, 2.4.04_001, 2.4.05_000 | — |
| cdatatec fd1608sn_firmware | 1.2.2, 2.4.03_000, 2.4.04_001, 2.4.05_000 | — |
| cdatatec fd1616gs_firmware | 1.2.2, 2.4.03_000, 2.4.04_001, 2.4.05_000 | — |
| cdatatec fd1616sn_firmware | 1.2.2, 2.4.03_000, 2.4.04_001, 2.4.05_000 | — |
| cdatatec fd8000_firmware | 1.2.2, 2.4.03_000, 2.4.04_001, 2.4.05_000 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.