CVE-2020-29054

cdatatec 72408a firmware, cdatatec 9008a firmware, cdatatec 9016a firmware +12 lainnya

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2020-29054

Katalog CVE

CVSS 9.8 · Critical EPSS 1,4%

Kerentanan Insufficiently Protected Credentials pada cdatatec 72408a firmware, cdatatec 9008a firmware +13 lainnya. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

An issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 97168P, FD1002S, FD1104, FD1104B, FD1104S, FD1104SN, FD1108S, FD1204S-R2, FD1204SN, FD1204SN-R2, FD1208S-R2, FD1216S-R1, FD1608GS, FD1608SN, FD1616GS, FD1616SN, and FD8000 devices. Attackers can use "show system infor" to discover cleartext TELNET credentials.

Rincian

Terbit di NVD
24 November 2020
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-522: Insufficiently Protected Credentials
EPSS (30 hari)
1,4% peluang dieksploitasi; lebih tinggi dari 71,2% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
cdatatec 72408a firmware Versi 1.2.2
cdatatec 72408a firmware Versi 2.4.03_000
cdatatec 72408a firmware Versi 2.4.04_001
cdatatec 72408a firmware Versi 2.4.05_000
cdatatec 9008a firmware Versi 1.2.2
cdatatec 9008a firmware Versi 2.4.03_000
cdatatec 9008a firmware Versi 2.4.04_001
cdatatec 9008a firmware Versi 2.4.05_000
cdatatec 9016a firmware Versi 1.2.2
cdatatec 9016a firmware Versi 2.4.03_000
cdatatec 9016a firmware Versi 2.4.04_001
cdatatec 9016a firmware Versi 2.4.05_000
cdatatec 92408a firmware Versi 1.2.2
cdatatec 92408a firmware Versi 2.4.03_000
cdatatec 92408a firmware Versi 2.4.04_001
cdatatec 92408a firmware Versi 2.4.05_000
cdatatec 92416a firmware Versi 1.2.2
cdatatec 92416a firmware Versi 2.4.03_000
cdatatec 92416a firmware Versi 2.4.04_001
cdatatec 92416a firmware Versi 2.4.05_000
cdatatec 9288 firmware Versi 1.2.2
cdatatec 9288 firmware Versi 2.4.03_000
cdatatec 9288 firmware Versi 2.4.04_001
cdatatec 9288 firmware Versi 2.4.05_000
cdatatec 97016 firmware Versi 1.2.2
cdatatec 97016 firmware Versi 2.4.03_000
cdatatec 97016 firmware Versi 2.4.04_001
cdatatec 97016 firmware Versi 2.4.05_000
cdatatec 97024p firmware Versi 1.2.2
cdatatec 97024p firmware Versi 2.4.03_000
cdatatec 97024p firmware Versi 2.4.04_001
cdatatec 97024p firmware Versi 2.4.05_000
cdatatec 97028p firmware Versi 1.2.2
cdatatec 97028p firmware Versi 2.4.03_000
cdatatec 97028p firmware Versi 2.4.04_001
cdatatec 97028p firmware Versi 2.4.05_000
cdatatec 97042p firmware Versi 1.2.2
cdatatec 97042p firmware Versi 2.4.03_000
cdatatec 97042p firmware Versi 2.4.04_001
cdatatec 97042p firmware Versi 2.4.05_000
cdatatec 97084p firmware Versi 1.2.2
cdatatec 97084p firmware Versi 2.4.03_000
cdatatec 97084p firmware Versi 2.4.04_001
cdatatec 97084p firmware Versi 2.4.05_000
cdatatec 97168p firmware Versi 1.2.2
cdatatec 97168p firmware Versi 2.4.03_000
cdatatec 97168p firmware Versi 2.4.04_001
cdatatec 97168p firmware Versi 2.4.05_000
cdatatec fd1002s firmware Versi 1.2.2
cdatatec fd1002s firmware Versi 2.4.03_000
cdatatec fd1002s firmware Versi 2.4.04_001
cdatatec fd1002s firmware Versi 2.4.05_000
cdatatec fd1104 firmware Versi 1.2.2
cdatatec fd1104 firmware Versi 2.4.03_000
cdatatec fd1104 firmware Versi 2.4.04_001
cdatatec fd1104 firmware Versi 2.4.05_000
cdatatec fd1104b firmware Versi 1.2.2
cdatatec fd1104b firmware Versi 2.4.03_000
cdatatec fd1104b firmware Versi 2.4.04_001
cdatatec fd1104b firmware Versi 2.4.05_000

> Data dari konfigurasi CPE di NVD. Ditampilkan 60 dari 112 konfigurasi; daftar lengkap ada di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.