Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-29016 State: PUBLISHED Published: 2021-01-14T16:04:45 Last Updated: 2024-10-25T14:23:38.299Z Vendors: Fortinet Products: Fortinet FortiWeb Problem Types: Execute unauthorized code or commands Description: A stack-based buffer overflow vulnerability in FortiWeb 6.3.0 through 6.3.5 and version before 6.2.4 may allow an unauthenticated, remote attacker to overwrite the content of the stack and potentially execute arbitrary code by sending a crafted request with a large certname. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.fortiguard.com/psirt/FG-IR-20-125
CVE ID: CVE-2020-29017 State: PUBLISHED Published: 2021-01-14T16:03:12 Last Updated: 2024-10-25T14:23:48.858Z Vendors: n/a Products: Fortinet FortiDeceptor Problem Types: Execute unauthorized code or commands Description: An OS command injection vulnerability in FortiDeceptor 3.1.0, 3.0.1, 3.0.0 may allow a remote authenticated attacker to execute arbitrary commands on the system by exploiting a command injection vulnerability on the Customization page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.fortiguard.com/psirt/FG-IR-20-177
CVE ID: CVE-2020-29018 State: PUBLISHED Published: 2021-01-14T16:06:03 Last Updated: 2024-10-25T14:23:23.372Z Vendors: Fortinet Products: Fortinet FortiWeb Problem Types: Execute unauthorized code or commands Description: A format string vulnerability in FortiWeb 6.3.0 through 6.3.5 may allow an authenticated, remote attacker to read the content of memory and retrieve sensitive data via the redir parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.fortiguard.com/psirt/FG-IR-20-123
CVE ID: CVE-2020-29019 State: PUBLISHED Published: 2021-01-14T16:01:57 Last Updated: 2024-10-25T14:23:58.898Z Vendors: n/a Products: Fortinet FortiWeb Problem Types: denial of service Description: A stack-based buffer overflow vulnerability in FortiWeb 6.3.0 through 6.3.7 and version before 6.2.4 may allow a remote, unauthenticated attacker to crash the httpd daemon thread by sending a request with a crafted cookie header. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.fortiguard.com/psirt/FG-IR-20-126
CVE ID: CVE-2020-29020 State: PUBLISHED Published: 2021-03-05T19:12:30.259586Z Last Updated: 2024-09-16T18:55:36.049Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Secomea Products: SiteManager Problem Types: CWE-284 Description: Improper Access Control vulnerability in web service of Secomea SiteManager allows remote attacker to access the web UI from the internet using the configured credentials. This issue affects: Secomea SiteManager All versions prior to 9.4.620527004 on Hardware. Additional Analyst Notes: - CVE Program Container: References: - https://www.secomea.com/support/cybersecurity-advisory/#3217
CVE ID: CVE-2020-29021 State: PUBLISHED Published: 2021-02-08T22:08:50.970504Z Last Updated: 2024-09-17T02:12:03.205Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N) Vendors: Secomea Products: GateManager Problem Types: CWE-20 Description: A vulnerability in web UI input field of GateManager allows authenticated attacker to enter script tags that could cause XSS. This issue affects: GateManager all versions prior to 9.3. Additional Analyst Notes: - CVE Program Container: References: - https://www.secomea.com/support/cybersecurity-advisory/
CVE ID: CVE-2020-29022 State: PUBLISHED Published: 2021-02-16T15:08:36.021278Z Last Updated: 2024-09-16T16:18:06.251Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Secomea Products: GateManager Problem Types: CWE-159 Description: Failure to Sanitize host header value on output in the GateManager Web server could allow an attacker to conduct web cache poisoning attacks. This issue affects Secomea GateManager all versions prior to 9.3 Additional Analyst Notes: - CVE Program Container: References: - https://www.secomea.com/support/cybersecurity-advisory/#2923
CVE ID: CVE-2020-29023 State: PUBLISHED Published: 2021-02-16T15:14:57.287954Z Last Updated: 2024-09-17T04:24:59.661Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N) Vendors: Secomea Products: GateManager Problem Types: CWE-116 Description: Improper Encoding or Escaping of Output from CSV Report Generator of Secomea GateManager allows an authenticated administrator to generate a CSV file that may run arbitrary commands on a victim's computer when opened in a spreadsheet program (like Excel). This issue affects: Secomea GateManager all versions prior to 9.3. Additional Analyst Notes: - CVE Program Container: References: - https://www.secomea.com/support/cybersecurity-adv
9.3. Additional Analyst Notes: - CVE Program Container: References: - https://www.secomea.com/support/cybersecurity-advisory/ - https://www.secomea.com/support/cybersecurity-advisory/#2418
CVE ID: CVE-2020-29024 State: PUBLISHED Published: 2021-02-16T15:07:41.787580Z Last Updated: 2024-09-16T16:38:40.890Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Secomea Products: GateManager Problem Types: CWE-614 Description: Sensitive Cookie in HTTPS Session Without 'Secure' Attribute vulnerability in (GTA) GoToAppliance of Secomea GateManager could allow an attacker to gain access to sensitive cookies. This issue affects: Secomea GateManager all versions prior to 9.3. Additional Analyst Notes: - CVE Program Container: References: - https://www.secomea.com/support/cybersecurity-advisory/#2418
CVE ID: CVE-2020-29025 State: PUBLISHED Published: 2021-02-16T15:45:49.213443Z Last Updated: 2024-09-16T16:17:30.588Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N) Vendors: Secomea Products: SiteManager Embedded (SM-E) Problem Types: CWE-79 Description: A vulnerability in SiteManager-Embedded (SM-E) Web server which may allow attacker to construct a URL that if visited by another application user, will cause JavaScript code supplied by the attacker to execute within the user's browser in the context of that user's session with the application. This issue affects all versions and variants of SM-E prior to version 9.3 Additional Analyst Notes: - CVE Program Container
s issue affects all versions and variants of SM-E prior to version 9.3 Additional Analyst Notes: - CVE Program Container: References: - https://www.secomea.com/support/cybersecurity-advisory/#3042
CVE ID: CVE-2020-29026 State: PUBLISHED Published: 2021-02-15T15:48:30 Last Updated: 2024-08-04T16:48:01.207Z Severity: CRITICAL (CVSS 9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:L) Vendors: Secomea Products: GateManager Problem Types: CWE-22 Description: A directory traversal vulnerability exists in the file upload function of the GateManager that allows an authenticated attacker with administrative permissions to read and write arbitrary files in the Linux file system. This issue affects: GateManager all versions prior to 9.2c. Additional Analyst Notes: - CVE Program Container: References: - https://www.secomea.com/support/cybersecurity-advisory/#2918
CVE ID: CVE-2020-29027 State: PUBLISHED Published: 2021-02-16T15:48:58.980830Z Last Updated: 2024-09-17T01:05:35.165Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: Secomea Products: SiteManager Problem Types: CWE-79 Description: Cross-site Scripting (XSS) vulnerability in GUI of Secomea SiteManager could allow an attacker to cause an XSS Attack. This issue affects: Secomea SiteManager all versions prior to 9.3. Additional Analyst Notes: - CVE Program Container: References: - https://www.secomea.com/support/cybersecurity-advisory/#3042
CVE ID: CVE-2020-29028 State: PUBLISHED Published: 2021-03-05T19:10:00.326274Z Last Updated: 2024-09-17T00:10:29.690Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: Secomea Products: GateManager Problem Types: CWE-79 Description: Cross-site Scripting (XSS) vulnerability in web GUI of Secomea GateManager allows an attacker to inject arbitrary javascript code. This issue affects: Secomea GateManager all versions prior to 9.4. Additional Analyst Notes: - CVE Program Container: References: - https://www.secomea.com/support/cybersecurity-advisory/
CVE ID: CVE-2020-29029 State: PUBLISHED Published: 2021-03-05T19:08:21.917052Z Last Updated: 2024-09-16T22:31:25.557Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: Secomea Products: GateManager Problem Types: CWE-20, CWE-79 Description: Improper Input Validation, Cross-site Scripting (XSS) vulnerability in Web GUI of Secomea GateManager allows an attacker to execute arbitrary javascript code. This issue affects: Secomea GateManager all versions prior to 9.4. Additional Analyst Notes: - CVE Program Container: References: - https://www.secomea.com/support/cybersecurity-advisory/
CVE ID: CVE-2020-29030 State: PUBLISHED Published: 2021-03-05T19:15:27.247684Z Last Updated: 2024-09-17T00:31:38.842Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H) Vendors: Secomea Products: GateManager Problem Types: CWE-352 Description: Cross-Site Request Forgery (CSRF) vulnerability in web GUI of Secomea GateManager allows an attacker to execute malicious code. This issue affects: Secomea GateManager All versions prior to 9.4. Additional Analyst Notes: - CVE Program Container: References: - https://www.secomea.com/support/cybersecurity-advisory/
CVE ID: CVE-2020-29031 State: PUBLISHED Published: 2021-02-15T15:52:30 Last Updated: 2024-08-04T16:48:00.792Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N) Vendors: Secomea Products: GateManager Problem Types: CWE-280 Description: An Insecure Direct Object Reference vulnerability exists in the web UI of the GateManager which allows an authenticated attacker to reset the password of any user in its domain or any sub-domain, via escalation of privileges. This issue affects all GateManager versions prior to 9.2c Additional Analyst Notes: - CVE Program Container: References: - https://www.secomea.com/support/cybersecurity-advisory/#2920
CVE ID: CVE-2020-29032 State: PUBLISHED Published: 2021-03-05T16:58:27.148457Z Last Updated: 2024-09-16T16:32:33.185Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H) Vendors: Secomea Products: GateManager Problem Types: CWE-494 Description: Upload of Code Without Integrity Check vulnerability in firmware archive of Secomea GateManager allows authenticated attacker to execute malicious code on server. This issue affects: Secomea GateManager all versions prior to 9.4.621054022 Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2021-06 - https://www.secomea.com/support/cybersecurity-advisory/#3737
CVE ID: CVE-2020-29040 State: PUBLISHED Published: 2020-11-24T16:07:21 Last Updated: 2024-08-04T16:48:01.566Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Xen through 4.14.x allowing x86 HVM guest OS users to cause a denial of service (stack corruption), cause a data leak, or possibly gain privileges because of an off-by-one error. NOTE: this issue is caused by an incorrect fix for CVE-2020-27671. Additional Analyst Notes: - CVE Program Container: References: - http://xenbits.xen.org/xsa/advisory-355.html - https://xenbits.xen.org/xsa/advisory-355.html - http://www.openwall.com/lists/oss-security/2021/01/19/4
CVE ID: CVE-2020-29041 State: PUBLISHED Published: 2021-01-06T20:52:14 Last Updated: 2024-08-04T16:48:01.347Z Vendors: n/a Products: n/a Problem Types: n/a Description: A misconfiguration in Web-Sesame 2020.1.1.3375 allows an unauthenticated attacker to download the source code of the application, facilitating its comprehension (code review). Specifically, JavaScript source maps were inadvertently included in the production Webpack configuration. These maps contain sources used to generate the bundle, configuration settings (e.g., API keys), and developers' comments. Additional Analyst Notes: - CVE Program Container: References: - https://blog.bssi.fr/source-code-vulnerability-disclosure-dis
onal Analyst Notes: - CVE Program Container: References: - https://blog.bssi.fr/source-code-vulnerability-disclosure-discovered-in-the-web-sesame-application-of-til-technologies/ - https://blog.bssi.fr/vulnerabilite-de-divulgation-de-code-source-identifiee-au-sein-de-lapplication-web-sesame-de-til-technologies/
CVE ID: CVE-2020-29042 State: PUBLISHED Published: 2020-11-26T17:51:00 Last Updated: 2024-08-04T16:48:01.502Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in BigBlueButton through 2.2.29. A brute-force attack may occur because an unlimited number of codes can be entered for a meeting that is protected by an access code. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bigbluebutton/bigbluebutton/releases - https://cxsecurity.com/issue/WLB-2020110210 - http://packetstormsecurity.com/files/160238/BigBlueButton-2.2.29-Brute-Force.html
CVE ID: CVE-2020-29043 State: PUBLISHED Published: 2020-11-26T17:49:43 Last Updated: 2024-08-04T16:48:01.544Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in BigBlueButton through 2.2.29. When at attacker is able to view an account_activations/edit?token= URI, the attacker can create an approved user account associated with an email address that has an arbitrary domain name. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bigbluebutton/bigbluebutton/releases - https://cxsecurity.com/issue/WLB-2020110211 - http://packetstormsecurity.com/files/160239/BigBlueButton-2.2.29-E-mail-Validation-Bypass.html
CVE ID: CVE-2020-29045 State: PUBLISHED Published: 2021-03-11T19:38:33 Last Updated: 2024-08-04T16:48:01.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: The food-and-drink-menu plugin through 2.2.0 for WordPress allows remote attackers to execute arbitrary code because of an unserialize operation on the fdm_cart cookie in load_cart_from_cookie in includes/class-cart-manager.php. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/food-and-drink-menu/#developers - https://appcheck-ng.com/cve-2020-29045/
CVE ID: CVE-2020-29047 State: PUBLISHED Published: 2021-03-03T17:15:29 Last Updated: 2024-08-04T16:48:01.371Z Vendors: n/a Products: n/a Problem Types: n/a Description: The wp-hotel-booking plugin through 1.10.2 for WordPress allows remote attackers to execute arbitrary code because of an unserialize operation on the thimpress_hotel_booking_1 cookie in load in includes/class-wphb-sessions.php. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/wp-hotel-booking/#developers - https://appcheck-ng.com/cve-2020-29047/
CVE ID: CVE-2020-29050 State: PUBLISHED Published: 2022-01-07T06:02:39 Last Updated: 2024-08-04T16:48:01.488Z Vendors: n/a Products: n/a Problem Types: n/a Description: SphinxSearch in Sphinx Technologies Sphinx through 3.1.1 allows directory traversal (in conjunction with CVE-2019-14511) because the mysql client can be used for CALL SNIPPETS and load_file operations on a full pathname (e.g., a file in the /etc directory). NOTE: this is unrelated to CMUSphinx. Additional Analyst Notes: - CVE Program Container: References: - https://blog.wirhabenstil.de/2019/08/19/sphinxsearch-0-0-0-09306-cve-2019-14511/ - https://security-tracker.debian.org/tracker/CVE-2020-29050 - https://lists.debian.org/d
ch-0-0-0-09306-cve-2019-14511/ - https://security-tracker.debian.org/tracker/CVE-2020-29050 - https://lists.debian.org/debian-lts-announce/2022/01/msg00009.html
CVE ID: CVE-2020-29053 State: PUBLISHED Published: 2020-11-24T19:59:35 Last Updated: 2024-08-04T16:48:01.328Z Vendors: n/a Products: n/a Problem Types: n/a Description: HRSALE 2.0.0 allows XSS via the admin/project/projects_calendar set_date parameter. Additional Analyst Notes: - CVE Program Container: References: - https://grimthereaperteam.medium.com/hrsale-v-2-0-0-reflected-cross-site-scripting-17a5617e2c6e - https://hrsale.com/update_log.php
CVE ID: CVE-2020-29054 State: PUBLISHED Published: 2020-11-24T21:01:14 Last Updated: 2024-08-04T16:48:01.253Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 97168P, FD1002S, FD1104, FD1104B, FD1104S, FD1104SN, FD1108S, FD1204S-R2, FD1204SN, FD1204SN-R2, FD1208S-R2, FD1216S-R1, FD1608GS, FD1608SN, FD1616GS, FD1616SN, and FD8000 devices. Attackers can use "show system infor" to discover cleartext TELNET credentials. Additional Analyst Notes: - CVE Program Container: References: - https://pierrekim.github.io/blog/2020-07-07-cdata-olt-0day-vulnerabilities.html
CVE ID: CVE-2020-29055 State: PUBLISHED Published: 2020-11-24T21:00:57 Last Updated: 2024-08-04T16:48:01.586Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 97168P, FD1002S, FD1104, FD1104B, FD1104S, FD1104SN, FD1108S, FD1204S-R2, FD1204SN, FD1204SN-R2, FD1208S-R2, FD1216S-R1, FD1608GS, FD1608SN, FD1616GS, FD1616SN, and FD8000 devices. By default, the appliance can be managed remotely only with HTTP, telnet, and SNMP. It doesn't support SSL/TLS for HTTP or SSH. An attacker can intercept passwords sent in cleartext and conduct man-in-the-middle attacks on the managem
HTTP or SSH. An attacker can intercept passwords sent in cleartext and conduct man-in-the-middle attacks on the management of the appliance. Additional Analyst Notes: - CVE Program Container: References: - https://pierrekim.github.io/blog/2020-07-07-cdata-olt-0day-vulnerabilities.html
CVE ID: CVE-2020-29056 State: PUBLISHED Published: 2020-11-24T21:00:13 Last Updated: 2024-08-04T16:48:01.269Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 97168P, FD1002S, FD1104, FD1104B, FD1104S, FD1104SN, FD1108S, FD1204S-R2, FD1204SN, FD1204SN-R2, FD1208S-R2, FD1216S-R1, FD1608GS, FD1608SN, FD1616GS, FD1616SN, and FD8000 devices. One can escape from a shell and acquire root privileges by leveraging the TFTP download configuration. Additional Analyst Notes: - CVE Program Container: References: - https://pierrekim.github.io/blog/2020-07-07-cdata-olt-0day-vulnera
Analyst Notes: - CVE Program Container: References: - https://pierrekim.github.io/blog/2020-07-07-cdata-olt-0day-vulnerabilities.html
CVE ID: CVE-2020-29057 State: PUBLISHED Published: 2020-11-24T20:59:55 Last Updated: 2024-08-04T16:48:01.417Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 97168P, FD1002S, FD1104, FD1104B, FD1104S, FD1104SN, FD1108S, FD1204S-R2, FD1204SN, FD1204SN-R2, FD1208S-R2, FD1216S-R1, FD1608GS, FD1608SN, FD1616GS, FD1616SN, and FD8000 devices. It allows remote attackers to cause a denial of service (reboot) by sending random bytes to the telnet server on port 23, aka a "shawarma" attack. Additional Analyst Notes: - CVE Program Container: References: - https://pierrekim.gith
ort 23, aka a "shawarma" attack. Additional Analyst Notes: - CVE Program Container: References: - https://pierrekim.github.io/blog/2020-07-07-cdata-olt-0day-vulnerabilities.html
CVE ID: CVE-2020-29058 State: PUBLISHED Published: 2020-11-24T20:59:29 Last Updated: 2024-08-04T16:48:01.307Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 97168P, FD1002S, FD1104, FD1104B, FD1104S, FD1104SN, FD1108S, FD1204S-R2, FD1204SN, FD1204SN-R2, FD1208S-R2, FD1216S-R1, FD1608GS, FD1608SN, FD1616GS, FD1616SN, and FD8000 devices. Attackers can discover cleartext web-server credentials via certain /opt/lighttpd/web/cgi/ requests. Additional Analyst Notes: - CVE Program Container: References: - https://pierrekim.github.io/blog/2020-07-07-cdata-olt-0day-vulnerabi
alyst Notes: - CVE Program Container: References: - https://pierrekim.github.io/blog/2020-07-07-cdata-olt-0day-vulnerabilities.html
CVE ID: CVE-2020-29059 State: PUBLISHED Published: 2020-11-24T20:58:53 Last Updated: 2024-08-04T16:48:01.566Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 97168P, FD1002S, FD1104, FD1104B, FD1104S, FD1104SN, FD1108S, FD1204S-R2, FD1204SN, FD1204SN-R2, FD1208S-R2, FD1216S-R1, FD1608GS, FD1608SN, FD1616GS, FD1616SN, and FD8000 devices. There is a default panger123 password for the suma123 account for certain old firmware. Additional Analyst Notes: - CVE Program Container: References: - https://pierrekim.github.io/blog/2020-07-07-cdata-olt-0day-vulnerabilities.html
CVE ID: CVE-2020-29060 State: PUBLISHED Published: 2020-11-24T20:58:43 Last Updated: 2024-08-04T16:48:01.574Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 97168P, FD1002S, FD1104, FD1104B, FD1104S, FD1104SN, FD1108S, FD1204S-R2, FD1204SN, FD1204SN-R2, FD1208S-R2, FD1216S-R1, FD1608GS, FD1608SN, FD1616GS, FD1616SN, and FD8000 devices. There is a default debug124 password for the debug account. Additional Analyst Notes: - CVE Program Container: References: - https://pierrekim.github.io/blog/2020-07-07-cdata-olt-0day-vulnerabilities.html
CVE ID: CVE-2020-29061 State: PUBLISHED Published: 2020-11-24T20:58:32 Last Updated: 2024-08-04T16:48:01.572Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 97168P, FD1002S, FD1104, FD1104B, FD1104S, FD1104SN, FD1108S, FD1204S-R2, FD1204SN, FD1204SN-R2, FD1208S-R2, FD1216S-R1, FD1608GS, FD1608SN, FD1616GS, FD1616SN, and FD8000 devices. There is a default root126 password for the root account. Additional Analyst Notes: - CVE Program Container: References: - https://pierrekim.github.io/blog/2020-07-07-cdata-olt-0day-vulnerabilities.html
CVE ID: CVE-2020-29062 State: PUBLISHED Published: 2020-11-24T20:58:23 Last Updated: 2024-08-04T16:48:01.491Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 97168P, FD1002S, FD1104, FD1104B, FD1104S, FD1104SN, FD1108S, FD1204S-R2, FD1204SN, FD1204SN-R2, FD1208S-R2, FD1216S-R1, FD1608GS, FD1608SN, FD1616GS, FD1616SN, and FD8000 devices. There is a default blank password for the guest account. Additional Analyst Notes: - CVE Program Container: References: - https://pierrekim.github.io/blog/2020-07-07-cdata-olt-0day-vulnerabilities.html
CVE ID: CVE-2020-29063 State: PUBLISHED Published: 2020-11-24T20:58:12 Last Updated: 2024-08-04T16:48:01.176Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 97168P, FD1002S, FD1104, FD1104B, FD1104S, FD1104SN, FD1108S, FD1204S-R2, FD1204SN, FD1204SN-R2, FD1208S-R2, FD1216S-R1, FD1608GS, FD1608SN, FD1616GS, FD1616SN, and FD8000 devices. A custom encryption algorithm is used to store encrypted passwords. This algorithm will XOR the password with the hardcoded *j7a(L#yZ98sSd5HfSgGjMj8;Ss;d)(*&^#@$a2s0i3g value. Additional Analyst Notes: - CVE Program Container: Referen
hardcoded *j7a(L#yZ98sSd5HfSgGjMj8;Ss;d)(*&^#@$a2s0i3g value. Additional Analyst Notes: - CVE Program Container: References: - https://pierrekim.github.io/blog/2020-07-07-cdata-olt-0day-vulnerabilities.html
CVE ID: CVE-2020-29065 State: REJECTED Published: 2020-11-26T17:01:51 Last Updated: 2020-11-26T17:01:51 Description: No description available.