CVE Feed

    Dashboard / CVE / CVE-2020-29063

    CVE-2020-29063

    An issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 97168P, FD1002S, FD1104, FD1104B, FD1104S, FD1104SN, FD1108S, FD1204S-R2, FD1204SN, FD1204SN-R2, FD1208S-R2, FD1216S-R1, FD1608GS, FD1608SN, FD1616GS, FD1616SN, and FD8000 devices. A custom encryption algorithm is used to store encrypted passwords. This algorithm will XOR the password with the hardcoded *j7a(L#yZ98sSd5HfSgGjMj8;Ss;d)(*&^#@$a2s0i3g value.

    Published:Nov 24, 2020
    Last Modified:Nov 21, 2024
    EPS:Nov 24, 2020
    EPSS Score:0.00079
    CVSS Score:7.5

    Affected Products

    Vendor
    Cdatatec
    Product
    72408a
    Vendor
    Cdatatec
    Product
    72408a Firmware
    Vendor
    Cdatatec
    Product
    9008a
    Vendor
    Cdatatec
    Product
    9008a Firmware
    Vendor
    Cdatatec
    Product
    9016a
    Vendor
    Cdatatec
    Product
    9016a Firmware
    Vendor
    Cdatatec
    Product
    92408a
    Vendor
    Cdatatec
    Product
    92408a Firmware
    Vendor
    Cdatatec
    Product
    92416a
    Vendor
    Cdatatec
    Product
    92416a Firmware
    Vendor
    Cdatatec
    Product
    9288
    Vendor
    Cdatatec
    Product
    9288 Firmware
    Vendor
    Cdatatec
    Product
    97016
    Vendor
    Cdatatec
    Product
    97016 Firmware
    Vendor
    Cdatatec
    Product
    97024p
    Vendor
    Cdatatec
    Product
    97024p Firmware
    Vendor
    Cdatatec
    Product
    97028p
    Vendor
    Cdatatec
    Product
    97028p Firmware
    Vendor
    Cdatatec
    Product
    97042p
    Vendor
    Cdatatec
    Product
    97042p Firmware
    Vendor
    Cdatatec
    Product
    97084p
    Vendor
    Cdatatec
    Product
    97084p Firmware
    Vendor
    Cdatatec
    Product
    97168p
    Vendor
    Cdatatec
    Product
    97168p Firmware
    Vendor
    Cdatatec
    Product
    Fd1002s
    Vendor
    Cdatatec
    Product
    Fd1002s Firmware
    Vendor
    Cdatatec
    Product
    Fd1104
    Vendor
    Cdatatec
    Product
    Fd1104 Firmware
    Vendor
    Cdatatec
    Product
    Fd1104b
    Vendor
    Cdatatec
    Product
    Fd1104b Firmware
    Vendor
    Cdatatec
    Product
    Fd1104s
    Vendor
    Cdatatec
    Product
    Fd1104s Firmware
    Vendor
    Cdatatec
    Product
    Fd1104sn
    Vendor
    Cdatatec
    Product
    Fd1104sn Firmware
    Vendor
    Cdatatec
    Product
    Fd1108s
    Vendor
    Cdatatec
    Product
    Fd1108s Firmware
    Vendor
    Cdatatec
    Product
    Fd1204s-r2
    Vendor
    Cdatatec
    Product
    Fd1204s-r2 Firmware
    Vendor
    Cdatatec
    Product
    Fd1204sn
    Vendor
    Cdatatec
    Product
    Fd1204sn-r2
    Vendor
    Cdatatec
    Product
    Fd1204sn-r2 Firmware
    Vendor
    Cdatatec
    Product
    Fd1204sn Firmware
    Vendor
    Cdatatec
    Product
    Fd1208s-r2
    Vendor
    Cdatatec
    Product
    Fd1208s-r2 Firmware
    Vendor
    Cdatatec
    Product
    Fd1216s-r1
    Vendor
    Cdatatec
    Product
    Fd1216s-r1 Firmware
    Vendor
    Cdatatec
    Product
    Fd1608gs
    Vendor
    Cdatatec
    Product
    Fd1608gs Firmware
    Vendor
    Cdatatec
    Product
    Fd1608sn
    Vendor
    Cdatatec
    Product
    Fd1608sn Firmware
    Vendor
    Cdatatec
    Product
    Fd1616gs
    Vendor
    Cdatatec
    Product
    Fd1616gs Firmware
    Vendor
    Cdatatec
    Product
    Fd1616sn
    Vendor
    Cdatatec
    Product
    Fd1616sn Firmware
    Vendor
    Cdatatec
    Product
    Fd8000
    Vendor
    Cdatatec
    Product
    Fd8000 Firmware

    Exploits

    https://pierrekim.github.io/blog/2020-07-07-cdata-olt-0day-vulnerabilities.htmlhttps://pierrekim.github.io/blog/2020-07-07-cdata-olt-0day-vulnerabilities.html

    Related CVEs

    CVE-2020-29054 (CVSS 9.8) — An issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97…
    CVE-2020-29055 (CVSS 5.9) — An issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97…
    CVE-2020-29056 (CVSS 9.8) — An issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97…
    CVE-2020-29057 (CVSS 7.5) — An issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97…
    CVE-2020-29058 (CVSS 9.8) — An issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97…
    CVE-2020-29059 (CVSS 9.8) — An issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97…
    CVE-2020-29060 (CVSS 9.8) — An issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97…
    CVE-2020-29061 (CVSS 9.8) — An issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97…
    CVE-2020-29062 (CVSS 9.8) — An issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High