CVE-2020-29060: Critical severity cdatatec 72408a firmware vulnerability
Published Nov 24, 2020
·Updated
An issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 97168P, FD1002S, FD1104, FD1104B, FD1104S, FD1104SN, FD1108S, FD1204S-R2, FD1204SN, FD1204SN-R2, FD1208S-R2, FD1216S-R1, FD1608GS, FD1608SN, FD1616GS, FD1616SN, and FD8000 devices. There is a default debug124 password for the debug account.
Affected Software
140 affected components
Cdatatec 72408a Firmware=1.2.2
Cdatatec 72408a Firmware=2.4.03_000
Cdatatec 72408a Firmware=2.4.04_001
Cdatatec 72408a Firmware=2.4.05_000
Cdatatec 72408a
Cdatatec 9008a Firmware=1.2.2
Cdatatec 9008a Firmware=2.4.03_000
Cdatatec 9008a Firmware=2.4.04_001
Cdatatec 9008a Firmware=2.4.05_000
Cdatatec 9008a
Cdatatec 9016a Firmware=1.2.2
Cdatatec 9016a Firmware=2.4.03_000
Cdatatec 9016a Firmware=2.4.04_001
Cdatatec 9016a Firmware=2.4.05_000
Cdatatec 9016a
Cdatatec 92408a Firmware=1.2.2
Cdatatec 92408a Firmware=2.4.03_000
Cdatatec 92408a Firmware=2.4.04_001
Cdatatec 92408a Firmware=2.4.05_000
Cdatatec 92408a
Cdatatec 92416a Firmware=1.2.2
Cdatatec 92416a Firmware=2.4.03_000
Cdatatec 92416a Firmware=2.4.04_001
Cdatatec 92416a Firmware=2.4.05_000
Cdatatec 92416a
Cdatatec 9288 Firmware=1.2.2
Cdatatec 9288 Firmware=2.4.03_000
Cdatatec 9288 Firmware=2.4.04_001
Cdatatec 9288 Firmware=2.4.05_000
Cdatatec 9288
Cdatatec 97016 Firmware=1.2.2
Cdatatec 97016 Firmware=2.4.03_000
Cdatatec 97016 Firmware=2.4.04_001
Cdatatec 97016 Firmware=2.4.05_000
Cdatatec 97016
Cdatatec 97024p Firmware=1.2.2
Cdatatec 97024p Firmware=2.4.03_000
Cdatatec 97024p Firmware=2.4.04_001
Cdatatec 97024p Firmware=2.4.05_000
Cdatatec 97024p
Cdatatec 97028p Firmware=1.2.2
Cdatatec 97028p Firmware=2.4.03_000
Cdatatec 97028p Firmware=2.4.04_001
Cdatatec 97028p Firmware=2.4.05_000
Cdatatec 97028p
Cdatatec 97042p Firmware=1.2.2
Cdatatec 97042p Firmware=2.4.03_000
Cdatatec 97042p Firmware=2.4.04_001
Cdatatec 97042p Firmware=2.4.05_000
Cdatatec 97042p
Cdatatec 97084p Firmware=1.2.2
Cdatatec 97084p Firmware=2.4.03_000
Cdatatec 97084p Firmware=2.4.04_001
Cdatatec 97084p Firmware=2.4.05_000
Cdatatec 97084p
Cdatatec 97168p Firmware=1.2.2
Cdatatec 97168p Firmware=2.4.03_000
Cdatatec 97168p Firmware=2.4.04_001
Cdatatec 97168p Firmware=2.4.05_000
Cdatatec 97168p
Cdatatec Fd1002s Firmware=1.2.2
Cdatatec Fd1002s Firmware=2.4.03_000
Cdatatec Fd1002s Firmware=2.4.04_001
Cdatatec Fd1002s Firmware=2.4.05_000
Cdatatec Fd1002s
Cdatatec Fd1104 Firmware=1.2.2
Cdatatec Fd1104 Firmware=2.4.03_000
Cdatatec Fd1104 Firmware=2.4.04_001
Cdatatec Fd1104 Firmware=2.4.05_000
Cdatatec Fd1104
Cdatatec Fd1104b Firmware=1.2.2
Cdatatec Fd1104b Firmware=2.4.03_000
Cdatatec Fd1104b Firmware=2.4.04_001
Cdatatec Fd1104b Firmware=2.4.05_000
Cdatatec Fd1104b
Cdatatec Fd1104s Firmware=1.2.2
Cdatatec Fd1104s Firmware=2.4.03_000
Cdatatec Fd1104s Firmware=2.4.04_001
Cdatatec Fd1104s Firmware=2.4.05_000
Cdatatec Fd1104s
Cdatatec Fd1104sn Firmware=1.2.2
Cdatatec Fd1104sn Firmware=2.4.03_000
Cdatatec Fd1104sn Firmware=2.4.04_001
Cdatatec Fd1104sn Firmware=2.4.05_000
Cdatatec Fd1104sn
Cdatatec Fd1108s Firmware=1.2.2
Cdatatec Fd1108s Firmware=2.4.03_000
Cdatatec Fd1108s Firmware=2.4.04_001
Cdatatec Fd1108s Firmware=2.4.05_000
Cdatatec Fd1108s
Cdatatec Fd1204s-r2 Firmware=1.2.2
Cdatatec Fd1204s-r2 Firmware=2.4.03_000
Cdatatec Fd1204s-r2 Firmware=2.4.04_001
Cdatatec Fd1204s-r2 Firmware=2.4.05_000
Cdatatec Fd1204s-r2
Cdatatec Fd1204sn Firmware=1.2.2
Cdatatec Fd1204sn Firmware=2.4.03_000
Cdatatec Fd1204sn Firmware=2.4.04_001
Cdatatec Fd1204sn Firmware=2.4.05_000
Cdatatec Fd1204sn
Cdatatec Fd1204sn-r2 Firmware=1.2.2
Cdatatec Fd1204sn-r2 Firmware=2.4.03_000
Cdatatec Fd1204sn-r2 Firmware=2.4.04_001
Cdatatec Fd1204sn-r2 Firmware=2.4.05_000
Cdatatec Fd1204sn-r2
Cdatatec Fd1208s-r2 Firmware=1.2.2
Cdatatec Fd1208s-r2 Firmware=2.4.03_000
Cdatatec Fd1208s-r2 Firmware=2.4.04_001
Cdatatec Fd1208s-r2 Firmware=2.4.05_000
Cdatatec Fd1208s-r2
Cdatatec Fd1216s-r1 Firmware=1.2.2
Cdatatec Fd1216s-r1 Firmware=2.4.03_000
Cdatatec Fd1216s-r1 Firmware=2.4.04_001
Cdatatec Fd1216s-r1 Firmware=2.4.05_000
Cdatatec Fd1216s-r1
Cdatatec Fd1608gs Firmware=1.2.2
Cdatatec Fd1608gs Firmware=2.4.03_000
Cdatatec Fd1608gs Firmware=2.4.04_001
Cdatatec Fd1608gs Firmware=2.4.05_000
Cdatatec Fd1608gs
Cdatatec Fd1608sn Firmware=1.2.2
Cdatatec Fd1608sn Firmware=2.4.03_000
Cdatatec Fd1608sn Firmware=2.4.04_001
Cdatatec Fd1608sn Firmware=2.4.05_000
Cdatatec Fd1608sn
Cdatatec Fd1616gs Firmware=1.2.2
Cdatatec Fd1616gs Firmware=2.4.03_000
Cdatatec Fd1616gs Firmware=2.4.04_001
Cdatatec Fd1616gs Firmware=2.4.05_000
Cdatatec Fd1616gs
Cdatatec Fd1616sn Firmware=1.2.2
Cdatatec Fd1616sn Firmware=2.4.03_000
Cdatatec Fd1616sn Firmware=2.4.04_001
Cdatatec Fd1616sn Firmware=2.4.05_000
Cdatatec Fd1616sn
Cdatatec Fd8000 Firmware=1.2.2
Cdatatec Fd8000 Firmware=2.4.03_000
Cdatatec Fd8000 Firmware=2.4.04_001
Cdatatec Fd8000 Firmware=2.4.05_000
Cdatatec Fd8000
Event History
Nov 24, 2020
CVE Published
via MITRE·08:58 PM
Data Sourced
via MITRE·08:58 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2020-29060?
CVE-2020-29060 has a high severity rating due to its potential for remote code execution.
2
How do I fix CVE-2020-29060?
To fix CVE-2020-29060, update the affected CDATA firmware to the latest available version.
3
Which devices are affected by CVE-2020-29060?
CVE-2020-29060 affects various CDATA devices, including the 72408A, 9008A, and FD series among others.
4
Can CVE-2020-29060 lead to data breaches?
Yes, CVE-2020-29060 can potentially lead to unauthorized access and data breaches if exploited.
5
Is there a workaround for CVE-2020-29060 until the firmware is updated?
Currently, the best prevention for CVE-2020-29060 is to apply vendor updates as no reliable workarounds are available.