9.8

CVE-2020-29059

Exploit
An issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 97168P, FD1002S, FD1104, FD1104B, FD1104S, FD1104SN, FD1108S, FD1204S-R2, FD1204SN, FD1204SN-R2, FD1208S-R2, FD1216S-R1, FD1608GS, FD1608SN, FD1616GS, FD1616SN, and FD8000 devices. There is a default panger123 password for the suma123 account for certain old firmware.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cdatatec ≫ 72408a Firmware Version 1.2.2
   Cdatatec ≫ 72408a Version -
Cdatatec ≫ 72408a Firmware Version 2.4.03_000
   Cdatatec ≫ 72408a Version -
Cdatatec ≫ 72408a Firmware Version 2.4.04_001
   Cdatatec ≫ 72408a Version -
Cdatatec ≫ 72408a Firmware Version 2.4.05_000
   Cdatatec ≫ 72408a Version -
Cdatatec ≫ 9008a Firmware Version 1.2.2
   Cdatatec ≫ 9008a Version -
Cdatatec ≫ 9008a Firmware Version 2.4.03_000
   Cdatatec ≫ 9008a Version -
Cdatatec ≫ 9008a Firmware Version 2.4.04_001
   Cdatatec ≫ 9008a Version -
Cdatatec ≫ 9008a Firmware Version 2.4.05_000
   Cdatatec ≫ 9008a Version -
Cdatatec ≫ 9016a Firmware Version 1.2.2
   Cdatatec ≫ 9016a Version -
Cdatatec ≫ 9016a Firmware Version 2.4.03_000
   Cdatatec ≫ 9016a Version -
Cdatatec ≫ 9016a Firmware Version 2.4.04_001
   Cdatatec ≫ 9016a Version -
Cdatatec ≫ 9016a Firmware Version 2.4.05_000
   Cdatatec ≫ 9016a Version -
Cdatatec ≫ 92408a Firmware Version 1.2.2
   Cdatatec ≫ 92408a Version -
Cdatatec ≫ 92408a Firmware Version 2.4.03_000
   Cdatatec ≫ 92408a Version -
Cdatatec ≫ 92408a Firmware Version 2.4.04_001
   Cdatatec ≫ 92408a Version -
Cdatatec ≫ 92408a Firmware Version 2.4.05_000
   Cdatatec ≫ 92408a Version -
Cdatatec ≫ 92416a Firmware Version 1.2.2
   Cdatatec ≫ 92416a Version -
Cdatatec ≫ 92416a Firmware Version 2.4.03_000
   Cdatatec ≫ 92416a Version -
Cdatatec ≫ 92416a Firmware Version 2.4.04_001
   Cdatatec ≫ 92416a Version -
Cdatatec ≫ 92416a Firmware Version 2.4.05_000
   Cdatatec ≫ 92416a Version -
Cdatatec ≫ 9288 Firmware Version 1.2.2
   Cdatatec ≫ 9288 Version -
Cdatatec ≫ 9288 Firmware Version 2.4.03_000
   Cdatatec ≫ 9288 Version -
Cdatatec ≫ 9288 Firmware Version 2.4.04_001
   Cdatatec ≫ 9288 Version -
Cdatatec ≫ 9288 Firmware Version 2.4.05_000
   Cdatatec ≫ 9288 Version -
Cdatatec ≫ 97016 Firmware Version 1.2.2
   Cdatatec ≫ 97016 Version -
Cdatatec ≫ 97016 Firmware Version 2.4.03_000
   Cdatatec ≫ 97016 Version -
Cdatatec ≫ 97016 Firmware Version 2.4.04_001
   Cdatatec ≫ 97016 Version -
Cdatatec ≫ 97016 Firmware Version 2.4.05_000
   Cdatatec ≫ 97016 Version -
Cdatatec ≫ 97024p Firmware Version 1.2.2
   Cdatatec ≫ 97024p Version -
Cdatatec ≫ 97024p Firmware Version 2.4.03_000
   Cdatatec ≫ 97024p Version -
Cdatatec ≫ 97024p Firmware Version 2.4.04_001
   Cdatatec ≫ 97024p Version -
Cdatatec ≫ 97024p Firmware Version 2.4.05_000
   Cdatatec ≫ 97024p Version -
Cdatatec ≫ 97028p Firmware Version 1.2.2
   Cdatatec ≫ 97028p Version -
Cdatatec ≫ 97028p Firmware Version 2.4.03_000
   Cdatatec ≫ 97028p Version -
Cdatatec ≫ 97028p Firmware Version 2.4.04_001
   Cdatatec ≫ 97028p Version -
Cdatatec ≫ 97028p Firmware Version 2.4.05_000
   Cdatatec ≫ 97028p Version -
Cdatatec ≫ 97042p Firmware Version 1.2.2
   Cdatatec ≫ 97042p Version -
Cdatatec ≫ 97042p Firmware Version 2.4.03_000
   Cdatatec ≫ 97042p Version -
Cdatatec ≫ 97042p Firmware Version 2.4.04_001
   Cdatatec ≫ 97042p Version -
Cdatatec ≫ 97042p Firmware Version 2.4.05_000
   Cdatatec ≫ 97042p Version -
Cdatatec ≫ 97084p Firmware Version 1.2.2
   Cdatatec ≫ 97084p Version -
Cdatatec ≫ 97084p Firmware Version 2.4.03_000
   Cdatatec ≫ 97084p Version -
Cdatatec ≫ 97084p Firmware Version 2.4.04_001
   Cdatatec ≫ 97084p Version -
Cdatatec ≫ 97084p Firmware Version 2.4.05_000
   Cdatatec ≫ 97084p Version -
Cdatatec ≫ 97168p Firmware Version 1.2.2
   Cdatatec ≫ 97168p Version -
Cdatatec ≫ 97168p Firmware Version 2.4.03_000
   Cdatatec ≫ 97168p Version -
Cdatatec ≫ 97168p Firmware Version 2.4.04_001
   Cdatatec ≫ 97168p Version -
Cdatatec ≫ 97168p Firmware Version 2.4.05_000
   Cdatatec ≫ 97168p Version -
Cdatatec ≫ Fd1002s Firmware Version 1.2.2
   Cdatatec ≫ Fd1002s Version -
Cdatatec ≫ Fd1002s Firmware Version 2.4.03_000
   Cdatatec ≫ Fd1002s Version -
Cdatatec ≫ Fd1002s Firmware Version 2.4.04_001
   Cdatatec ≫ Fd1002s Version -
Cdatatec ≫ Fd1002s Firmware Version 2.4.05_000
   Cdatatec ≫ Fd1002s Version -
Cdatatec ≫ Fd1104 Firmware Version 1.2.2
   Cdatatec ≫ Fd1104 Version -
Cdatatec ≫ Fd1104 Firmware Version 2.4.03_000
   Cdatatec ≫ Fd1104 Version -
Cdatatec ≫ Fd1104 Firmware Version 2.4.04_001
   Cdatatec ≫ Fd1104 Version -
Cdatatec ≫ Fd1104 Firmware Version 2.4.05_000
   Cdatatec ≫ Fd1104 Version -
Cdatatec ≫ Fd1104b Firmware Version 1.2.2
   Cdatatec ≫ Fd1104b Version -
Cdatatec ≫ Fd1104b Firmware Version 2.4.03_000
   Cdatatec ≫ Fd1104b Version -
Cdatatec ≫ Fd1104b Firmware Version 2.4.04_001
   Cdatatec ≫ Fd1104b Version -
Cdatatec ≫ Fd1104b Firmware Version 2.4.05_000
   Cdatatec ≫ Fd1104b Version -
Cdatatec ≫ Fd1104s Firmware Version 1.2.2
   Cdatatec ≫ Fd1104s Version -
Cdatatec ≫ Fd1104s Firmware Version 2.4.03_000
   Cdatatec ≫ Fd1104s Version -
Cdatatec ≫ Fd1104s Firmware Version 2.4.04_001
   Cdatatec ≫ Fd1104s Version -
Cdatatec ≫ Fd1104s Firmware Version 2.4.05_000
   Cdatatec ≫ Fd1104s Version -
Cdatatec ≫ Fd1104sn Firmware Version 1.2.2
   Cdatatec ≫ Fd1104sn Version -
Cdatatec ≫ Fd1104sn Firmware Version 2.4.03_000
   Cdatatec ≫ Fd1104sn Version -
Cdatatec ≫ Fd1104sn Firmware Version 2.4.04_001
   Cdatatec ≫ Fd1104sn Version -
Cdatatec ≫ Fd1104sn Firmware Version 2.4.05_000
   Cdatatec ≫ Fd1104sn Version -
Cdatatec ≫ Fd1108s Firmware Version 1.2.2
   Cdatatec ≫ Fd1108s Version -
Cdatatec ≫ Fd1108s Firmware Version 2.4.03_000
   Cdatatec ≫ Fd1108s Version -
Cdatatec ≫ Fd1108s Firmware Version 2.4.04_001
   Cdatatec ≫ Fd1108s Version -
Cdatatec ≫ Fd1108s Firmware Version 2.4.05_000
   Cdatatec ≫ Fd1108s Version -
Cdatatec ≫ Fd1204s-r2 Firmware Version 1.2.2
   Cdatatec ≫ Fd1204s-r2 Version -
Cdatatec ≫ Fd1204s-r2 Firmware Version 2.4.03_000
   Cdatatec ≫ Fd1204s-r2 Version -
Cdatatec ≫ Fd1204s-r2 Firmware Version 2.4.04_001
   Cdatatec ≫ Fd1204s-r2 Version -
Cdatatec ≫ Fd1204s-r2 Firmware Version 2.4.05_000
   Cdatatec ≫ Fd1204s-r2 Version -
Cdatatec ≫ Fd1204sn Firmware Version 1.2.2
   Cdatatec ≫ Fd1204sn Version -
Cdatatec ≫ Fd1204sn Firmware Version 2.4.03_000
   Cdatatec ≫ Fd1204sn Version -
Cdatatec ≫ Fd1204sn Firmware Version 2.4.04_001
   Cdatatec ≫ Fd1204sn Version -
Cdatatec ≫ Fd1204sn Firmware Version 2.4.05_000
   Cdatatec ≫ Fd1204sn Version -
Cdatatec ≫ Fd1204sn-r2 Firmware Version 1.2.2
   Cdatatec ≫ Fd1204sn-r2 Version -
Cdatatec ≫ Fd1204sn-r2 Firmware Version 2.4.03_000
   Cdatatec ≫ Fd1204sn-r2 Version -
Cdatatec ≫ Fd1204sn-r2 Firmware Version 2.4.04_001
   Cdatatec ≫ Fd1204sn-r2 Version -
Cdatatec ≫ Fd1204sn-r2 Firmware Version 2.4.05_000
   Cdatatec ≫ Fd1204sn-r2 Version -
Cdatatec ≫ Fd1208s-r2 Firmware Version 1.2.2
   Cdatatec ≫ Fd1208s-r2 Version -
Cdatatec ≫ Fd1208s-r2 Firmware Version 2.4.03_000
   Cdatatec ≫ Fd1208s-r2 Version -
Cdatatec ≫ Fd1208s-r2 Firmware Version 2.4.04_001
   Cdatatec ≫ Fd1208s-r2 Version -
Cdatatec ≫ Fd1208s-r2 Firmware Version 2.4.05_000
   Cdatatec ≫ Fd1208s-r2 Version -
Cdatatec ≫ Fd1216s-r1 Firmware Version 1.2.2
   Cdatatec ≫ Fd1216s-r1 Version -
Cdatatec ≫ Fd1216s-r1 Firmware Version 2.4.03_000
   Cdatatec ≫ Fd1216s-r1 Version -
Cdatatec ≫ Fd1216s-r1 Firmware Version 2.4.04_001
   Cdatatec ≫ Fd1216s-r1 Version -
Cdatatec ≫ Fd1216s-r1 Firmware Version 2.4.05_000
   Cdatatec ≫ Fd1216s-r1 Version -
Cdatatec ≫ Fd1608gs Firmware Version 1.2.2
   Cdatatec ≫ Fd1608gs Version -
Cdatatec ≫ Fd1608gs Firmware Version 2.4.03_000
   Cdatatec ≫ Fd1608gs Version -
Cdatatec ≫ Fd1608gs Firmware Version 2.4.04_001
   Cdatatec ≫ Fd1608gs Version -
Cdatatec ≫ Fd1608gs Firmware Version 2.4.05_000
   Cdatatec ≫ Fd1608gs Version -
Cdatatec ≫ Fd1608sn Firmware Version 1.2.2
   Cdatatec ≫ Fd1608sn Version -
Cdatatec ≫ Fd1608sn Firmware Version 2.4.03_000
   Cdatatec ≫ Fd1608sn Version -
Cdatatec ≫ Fd1608sn Firmware Version 2.4.04_001
   Cdatatec ≫ Fd1608sn Version -
Cdatatec ≫ Fd1608sn Firmware Version 2.4.05_000
   Cdatatec ≫ Fd1608sn Version -
Cdatatec ≫ Fd1616gs Firmware Version 1.2.2
   Cdatatec ≫ Fd1616gs Version -
Cdatatec ≫ Fd1616gs Firmware Version 2.4.03_000
   Cdatatec ≫ Fd1616gs Version -
Cdatatec ≫ Fd1616gs Firmware Version 2.4.04_001
   Cdatatec ≫ Fd1616gs Version -
Cdatatec ≫ Fd1616gs Firmware Version 2.4.05_000
   Cdatatec ≫ Fd1616gs Version -
Cdatatec ≫ Fd1616sn Firmware Version 1.2.2
   Cdatatec ≫ Fd1616sn Version -
Cdatatec ≫ Fd1616sn Firmware Version 2.4.03_000
   Cdatatec ≫ Fd1616sn Version -
Cdatatec ≫ Fd1616sn Firmware Version 2.4.04_001
   Cdatatec ≫ Fd1616sn Version -
Cdatatec ≫ Fd1616sn Firmware Version 2.4.05_000
   Cdatatec ≫ Fd1616sn Version -
Cdatatec ≫ Fd8000 Firmware Version 1.2.2
   Cdatatec ≫ Fd8000 Version -
Cdatatec ≫ Fd8000 Firmware Version 2.4.03_000
   Cdatatec ≫ Fd8000 Version -
Cdatatec ≫ Fd8000 Firmware Version 2.4.04_001
   Cdatatec ≫ Fd8000 Version -
Cdatatec ≫ Fd8000 Firmware Version 2.4.05_000
   Cdatatec ≫ Fd8000 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.49% 0.72
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NIST 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
CWE-798 Use of Hard-coded Credentials

The product contains hard-coded credentials, such as a password or cryptographic key.

https://pierrekim.github.io/blog/2020-07-07-cdata-olt-0day-vulnerabilities.html
Third Party Advisory
Exploit