CVE-2020-29380
First published: Sun Nov 29 2020(Updated: )
An issue was discovered on V-SOL V1600D V2.03.69 and V2.03.57, V1600D4L V1.01.49, V1600D-MINI V1.01.48, V1600G1 V2.0.7 and V1.9.7, and V1600G2 V1.1.4 OLT devices. TELNET is offered by default but SSH is not always available. An attacker can intercept passwords sent in cleartext and conduct a man-in-the-middle attack on the management of the appliance.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Vsolcn V1600d | =2.03.57 | |
| Vsolcn V1600d | =2.03.69 | |
| Vsolcn V1600d4l | ||
| Vsolcn V1600d4l | =1.01.49 | |
| Vsolcn V1600d4l Firmware | ||
| Vsolcn V1600d-mini Firmware | =1.01.48 | |
| Vsolcn V1600d-mini Firmware | ||
| Vsolcn V1600g1 | =1.9.7 | |
| Vsolcn V1600g1 | =2.0.7 | |
| Vsolcn V1600g1 Firmware | ||
| Vsolcn V1600g2 | =1.1.4 | |
| Vsolcn V1600g2 Firmware |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2020-29380?
The severity of CVE-2020-29380 is medium with a severity value of 5.9.
What software versions are affected by CVE-2020-29380?
CVE-2020-29380 affects V-SOL V1600D V2.03.69 and V2.03.57, V1600D4L V1.01.49, V1600D-MINI V1.01.48, V1600G1 V2.0.7 and V1.9.7, and V1600G2 V1.1.4 OLT devices.
Does CVE-2020-29380 require authentication?
CVE-2020-29380 does not require authentication.
How can an attacker exploit CVE-2020-29380?
An attacker can intercept passwords sent in cleartext and conduct a man-in-the-middle attack.
Are there any fixes available for CVE-2020-29380?
It is recommended to update to the latest firmware version provided by V-SOL.
- agent/weakness
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/severity
- agent/last-modified-date
- agent/author
- agent/event
- agent/first-publish-date
- agent/description
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/vsolcn
- canonical/vsolcn v1600d
- version/vsolcn v1600d/2.03.57
- version/vsolcn v1600d/2.03.69
- canonical/vsolcn v1600d4l
- version/vsolcn v1600d4l/1.01.49
- canonical/vsolcn v1600d4l firmware
- canonical/vsolcn v1600d-mini firmware
- version/vsolcn v1600d-mini firmware/1.01.48
- canonical/vsolcn v1600g1
- version/vsolcn v1600g1/1.9.7
- version/vsolcn v1600g1/2.0.7
- canonical/vsolcn v1600g1 firmware
- canonical/vsolcn v1600g2
- version/vsolcn v1600g2/1.1.4
- canonical/vsolcn v1600g2 firmware