5.9
CVE-2020-29055
- EPSS 0.13%
- Veröffentlicht 24.11.2020 21:15:11
- Zuletzt bearbeitet 21.11.2024 05:23:36
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
An issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 97168P, FD1002S, FD1104, FD1104B, FD1104S, FD1104SN, FD1108S, FD1204S-R2, FD1204SN, FD1204SN-R2, FD1208S-R2, FD1216S-R1, FD1608GS, FD1608SN, FD1616GS, FD1616SN, and FD8000 devices. By default, the appliance can be managed remotely only with HTTP, telnet, and SNMP. It doesn't support SSL/TLS for HTTP or SSH. An attacker can intercept passwords sent in cleartext and conduct man-in-the-middle attacks on the management of the appliance.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cdatatec ≫ 72408a Firmware Version1.2.2
Cdatatec ≫ 72408a Firmware Version2.4.03_000
Cdatatec ≫ 72408a Firmware Version2.4.04_001
Cdatatec ≫ 72408a Firmware Version2.4.05_000
Cdatatec ≫ 9008a Firmware Version1.2.2
Cdatatec ≫ 9008a Firmware Version2.4.03_000
Cdatatec ≫ 9008a Firmware Version2.4.04_001
Cdatatec ≫ 9008a Firmware Version2.4.05_000
Cdatatec ≫ 9016a Firmware Version1.2.2
Cdatatec ≫ 9016a Firmware Version2.4.03_000
Cdatatec ≫ 9016a Firmware Version2.4.04_001
Cdatatec ≫ 9016a Firmware Version2.4.05_000
Cdatatec ≫ 92408a Firmware Version1.2.2
Cdatatec ≫ 92408a Firmware Version2.4.03_000
Cdatatec ≫ 92408a Firmware Version2.4.04_001
Cdatatec ≫ 92408a Firmware Version2.4.05_000
Cdatatec ≫ 92416a Firmware Version1.2.2
Cdatatec ≫ 92416a Firmware Version2.4.03_000
Cdatatec ≫ 92416a Firmware Version2.4.04_001
Cdatatec ≫ 92416a Firmware Version2.4.05_000
Cdatatec ≫ 9288 Firmware Version1.2.2
Cdatatec ≫ 9288 Firmware Version2.4.03_000
Cdatatec ≫ 9288 Firmware Version2.4.04_001
Cdatatec ≫ 9288 Firmware Version2.4.05_000
Cdatatec ≫ 97016 Firmware Version1.2.2
Cdatatec ≫ 97016 Firmware Version2.4.03_000
Cdatatec ≫ 97016 Firmware Version2.4.04_001
Cdatatec ≫ 97016 Firmware Version2.4.05_000
Cdatatec ≫ 97024p Firmware Version1.2.2
Cdatatec ≫ 97024p Firmware Version2.4.03_000
Cdatatec ≫ 97024p Firmware Version2.4.04_001
Cdatatec ≫ 97024p Firmware Version2.4.05_000
Cdatatec ≫ 97028p Firmware Version1.2.2
Cdatatec ≫ 97028p Firmware Version2.4.03_000
Cdatatec ≫ 97028p Firmware Version2.4.04_001
Cdatatec ≫ 97028p Firmware Version2.4.05_000
Cdatatec ≫ 97042p Firmware Version1.2.2
Cdatatec ≫ 97042p Firmware Version2.4.03_000
Cdatatec ≫ 97042p Firmware Version2.4.04_001
Cdatatec ≫ 97042p Firmware Version2.4.05_000
Cdatatec ≫ 97084p Firmware Version1.2.2
Cdatatec ≫ 97084p Firmware Version2.4.03_000
Cdatatec ≫ 97084p Firmware Version2.4.04_001
Cdatatec ≫ 97084p Firmware Version2.4.05_000
Cdatatec ≫ 97168p Firmware Version1.2.2
Cdatatec ≫ 97168p Firmware Version2.4.03_000
Cdatatec ≫ 97168p Firmware Version2.4.04_001
Cdatatec ≫ 97168p Firmware Version2.4.05_000
Cdatatec ≫ Fd1002s Firmware Version1.2.2
Cdatatec ≫ Fd1002s Firmware Version2.4.03_000
Cdatatec ≫ Fd1002s Firmware Version2.4.04_001
Cdatatec ≫ Fd1002s Firmware Version2.4.05_000
Cdatatec ≫ Fd1104 Firmware Version1.2.2
Cdatatec ≫ Fd1104 Firmware Version2.4.03_000
Cdatatec ≫ Fd1104 Firmware Version2.4.04_001
Cdatatec ≫ Fd1104 Firmware Version2.4.05_000
Cdatatec ≫ Fd1104b Firmware Version1.2.2
Cdatatec ≫ Fd1104b Firmware Version2.4.03_000
Cdatatec ≫ Fd1104b Firmware Version2.4.04_001
Cdatatec ≫ Fd1104b Firmware Version2.4.05_000
Cdatatec ≫ Fd1104s Firmware Version1.2.2
Cdatatec ≫ Fd1104s Firmware Version2.4.03_000
Cdatatec ≫ Fd1104s Firmware Version2.4.04_001
Cdatatec ≫ Fd1104s Firmware Version2.4.05_000
Cdatatec ≫ Fd1104sn Firmware Version1.2.2
Cdatatec ≫ Fd1104sn Firmware Version2.4.03_000
Cdatatec ≫ Fd1104sn Firmware Version2.4.04_001
Cdatatec ≫ Fd1104sn Firmware Version2.4.05_000
Cdatatec ≫ Fd1108s Firmware Version1.2.2
Cdatatec ≫ Fd1108s Firmware Version2.4.03_000
Cdatatec ≫ Fd1108s Firmware Version2.4.04_001
Cdatatec ≫ Fd1108s Firmware Version2.4.05_000
Cdatatec ≫ Fd1204s-r2 Firmware Version1.2.2
Cdatatec ≫ Fd1204s-r2 Firmware Version2.4.03_000
Cdatatec ≫ Fd1204s-r2 Firmware Version2.4.04_001
Cdatatec ≫ Fd1204s-r2 Firmware Version2.4.05_000
Cdatatec ≫ Fd1204sn Firmware Version1.2.2
Cdatatec ≫ Fd1204sn Firmware Version2.4.03_000
Cdatatec ≫ Fd1204sn Firmware Version2.4.04_001
Cdatatec ≫ Fd1204sn Firmware Version2.4.05_000
Cdatatec ≫ Fd1204sn-r2 Firmware Version1.2.2
Cdatatec ≫ Fd1204sn-r2 Firmware Version2.4.03_000
Cdatatec ≫ Fd1204sn-r2 Firmware Version2.4.04_001
Cdatatec ≫ Fd1204sn-r2 Firmware Version2.4.05_000
Cdatatec ≫ Fd1208s-r2 Firmware Version1.2.2
Cdatatec ≫ Fd1208s-r2 Firmware Version2.4.03_000
Cdatatec ≫ Fd1208s-r2 Firmware Version2.4.04_001
Cdatatec ≫ Fd1208s-r2 Firmware Version2.4.05_000
Cdatatec ≫ Fd1216s-r1 Firmware Version1.2.2
Cdatatec ≫ Fd1216s-r1 Firmware Version2.4.03_000
Cdatatec ≫ Fd1216s-r1 Firmware Version2.4.04_001
Cdatatec ≫ Fd1216s-r1 Firmware Version2.4.05_000
Cdatatec ≫ Fd1608gs Firmware Version1.2.2
Cdatatec ≫ Fd1608gs Firmware Version2.4.03_000
Cdatatec ≫ Fd1608gs Firmware Version2.4.04_001
Cdatatec ≫ Fd1608gs Firmware Version2.4.05_000
Cdatatec ≫ Fd1608sn Firmware Version1.2.2
Cdatatec ≫ Fd1608sn Firmware Version2.4.03_000
Cdatatec ≫ Fd1608sn Firmware Version2.4.04_001
Cdatatec ≫ Fd1608sn Firmware Version2.4.05_000
Cdatatec ≫ Fd1616gs Firmware Version1.2.2
Cdatatec ≫ Fd1616gs Firmware Version2.4.03_000
Cdatatec ≫ Fd1616gs Firmware Version2.4.04_001
Cdatatec ≫ Fd1616gs Firmware Version2.4.05_000
Cdatatec ≫ Fd1616sn Firmware Version1.2.2
Cdatatec ≫ Fd1616sn Firmware Version2.4.03_000
Cdatatec ≫ Fd1616sn Firmware Version2.4.04_001
Cdatatec ≫ Fd1616sn Firmware Version2.4.05_000
Cdatatec ≫ Fd8000 Firmware Version1.2.2
Cdatatec ≫ Fd8000 Firmware Version2.4.03_000
Cdatatec ≫ Fd8000 Firmware Version2.4.04_001
Cdatatec ≫ Fd8000 Firmware Version2.4.05_000
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.13% | 0.286 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 5.9 | 2.2 | 3.6 |
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
|
| nvd@nist.gov | 4.3 | 8.6 | 2.9 |
AV:N/AC:M/Au:N/C:P/I:N/A:N
|
CWE-319 Cleartext Transmission of Sensitive Information
The product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.