CVE-2020-29055
5.9
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Exploitability: 2.2 / Impact: 3.6
Source: NVD
Description
An issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 97168P, FD1002S, FD1104, FD1104B, FD1104S, FD1104SN, FD1108S, FD1204S-R2, FD1204SN, FD1204SN-R2, FD1208S-R2, FD1216S-R1, FD1608GS, FD1608SN, FD1616GS, FD1616SN, and FD8000 devices. By default, the appliance can be managed remotely only with HTTP, telnet, and SNMP. It doesn't support SSL/TLS for HTTP or SSH. An attacker can intercept passwords sent in cleartext and conduct man-in-the-middle attacks on the management of the appliance.
Affected (112)
Products: Cdatatec: 72408a Firmware, 9008a Firmware, 9016a Firmware, 92408a Firmware, 92416a Firmware, 9288 Firmware, 97016 Firmware, 97024p Firmware, 97028p Firmware, 97042p Firmware, 97084p Firmware, 97168p Firmware, Fd1002s Firmware, Fd1104 Firmware, Fd1104b Firmware, Fd1104s Firmware, Fd1104sn Firmware, Fd1108s Firmware, Fd1204s R2 Firmware, Fd1204sn Firmware, Fd1204sn R2 Firmware, Fd1208s R2 Firmware, Fd1216s R1 Firmware, Fd1608gs Firmware, Fd1608sn Firmware, Fd1616gs Firmware, Fd1616sn Firmware, Fd8000 Firmware
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Version 1.2.2 |
| Running on/with | Platform Versions |
|---|---|
Cdatatec 72408a | All versions |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Version 1.2.2 |
| Running on/with | Platform Versions |
|---|---|
Cdatatec 9008a | All versions |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| Version 1.2.2 |
| Running on/with | Platform Versions |
|---|---|
Cdatatec 9016a | All versions |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| Version 1.2.2 |
| Running on/with | Platform Versions |
|---|---|
Cdatatec 92408a | All versions |
Configuration E
| Vulnerable Software | Affected Versions |
|---|---|
| Version 1.2.2 |
| Running on/with | Platform Versions |
|---|---|
Cdatatec 92416a | All versions |
Configuration F
| Vulnerable Software | Affected Versions |
|---|---|
| Version 1.2.2 |
| Running on/with | Platform Versions |
|---|---|
Cdatatec 9288 | All versions |
Configuration G
| Vulnerable Software | Affected Versions |
|---|---|
| Version 1.2.2 |
| Running on/with | Platform Versions |
|---|---|
Cdatatec 97016 | All versions |
Configuration H
| Vulnerable Software | Affected Versions |
|---|---|
| Version 1.2.2 |
| Running on/with | Platform Versions |
|---|---|
Cdatatec 97024p | All versions |
Configuration I
| Vulnerable Software | Affected Versions |
|---|---|
| Version 1.2.2 |
| Running on/with | Platform Versions |
|---|---|
Cdatatec 97028p | All versions |
Configuration J
| Vulnerable Software | Affected Versions |
|---|---|
| Version 1.2.2 |
| Running on/with | Platform Versions |
|---|---|
Cdatatec 97042p | All versions |
Configuration K
| Vulnerable Software | Affected Versions |
|---|---|
| Version 1.2.2 |
| Running on/with | Platform Versions |
|---|---|
Cdatatec 97084p | All versions |
Configuration L
| Vulnerable Software | Affected Versions |
|---|---|
| Version 1.2.2 |
| Running on/with | Platform Versions |
|---|---|
Cdatatec 97168p | All versions |
Configuration M
| Vulnerable Software | Affected Versions |
|---|---|
| Version 1.2.2 |
| Running on/with | Platform Versions |
|---|---|
Cdatatec Fd1002s | All versions |
Configuration N
| Vulnerable Software | Affected Versions |
|---|---|
| Version 1.2.2 |
| Running on/with | Platform Versions |
|---|---|
Cdatatec Fd1104 | All versions |
Configuration O
| Vulnerable Software | Affected Versions |
|---|---|
| Version 1.2.2 |
| Running on/with | Platform Versions |
|---|---|
Cdatatec Fd1104b | All versions |
Configuration P
| Vulnerable Software | Affected Versions |
|---|---|
| Version 1.2.2 |
| Running on/with | Platform Versions |
|---|---|
Cdatatec Fd1104s | All versions |
Configuration Q
| Vulnerable Software | Affected Versions |
|---|---|
| Version 1.2.2 |
| Running on/with | Platform Versions |
|---|---|
Cdatatec Fd1104sn | All versions |
Configuration R
| Vulnerable Software | Affected Versions |
|---|---|
| Version 1.2.2 |
| Running on/with | Platform Versions |
|---|---|
Cdatatec Fd1108s | All versions |
Configuration S
| Vulnerable Software | Affected Versions |
|---|---|
| Version 1.2.2 |
| Running on/with | Platform Versions |
|---|---|
Cdatatec Fd1204s R2 | All versions |
Configuration T
| Vulnerable Software | Affected Versions |
|---|---|
| Version 1.2.2 |
| Running on/with | Platform Versions |
|---|---|
Cdatatec Fd1204sn | All versions |
Configuration U
| Vulnerable Software | Affected Versions |
|---|---|
| Version 1.2.2 |
| Running on/with | Platform Versions |
|---|---|
Cdatatec Fd1204sn R2 | All versions |
Configuration V
| Vulnerable Software | Affected Versions |
|---|---|
| Version 1.2.2 |
| Running on/with | Platform Versions |
|---|---|
Cdatatec Fd1208s R2 | All versions |
Configuration W
| Vulnerable Software | Affected Versions |
|---|---|
| Version 1.2.2 |
| Running on/with | Platform Versions |
|---|---|
Cdatatec Fd1216s R1 | All versions |
Configuration X
| Vulnerable Software | Affected Versions |
|---|---|
| Version 1.2.2 |
| Running on/with | Platform Versions |
|---|---|
Cdatatec Fd1608gs | All versions |
Configuration Y
| Vulnerable Software | Affected Versions |
|---|---|
| Version 1.2.2 |
| Running on/with | Platform Versions |
|---|---|
Cdatatec Fd1608sn | All versions |
Configuration Z
| Vulnerable Software | Affected Versions |
|---|---|
| Version 1.2.2 |
| Running on/with | Platform Versions |
|---|---|
Cdatatec Fd1616gs | All versions |
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Version 1.2.2 |
| Running on/with | Platform Versions |
|---|---|
Cdatatec Fd1616sn | All versions |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Version 1.2.2 |
| Running on/with | Platform Versions |
|---|---|
Cdatatec Fd8000 | All versions |
References (2)
Source: cve@mitre.org
ExploitThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitThird Party Advisory
Timeline
No history available yet.