CVE-2020-29379
Medium
Description
An issue was discovered on V-SOL V1600D4L V1.01.49 and V1600D-MINI V1.01.48 OLT devices. During the process of updating the firmware, the update script starts a telnetd -l /bin/sh process that does not require authentication for TELNET access.
SeverityMedium
CVSS5.5
Exploit probability—
ProductVsolcn V1600d4l Firmware
PublishedNov 29, 2020
First seenNov 29, 2020
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| vsolcn v1600d4l_firmware | 1.01.49 | — |
| vsolcn v1600d-mini_firmware | 1.01.48 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.