6 results (0.013 seconds)

CVSS: 8.8EPSS: 0%CPEs: 12EXPL: 0

CVE-2020-29375

https://notcve.org/view.php?id=CVE-2020-29375

29 Nov 2020 — An issue was discovered on V-SOL V1600D V2.03.69 and V2.03.57, V1600D4L V1.01.49, V1600D-MINI V1.01.48, V1600G1 V2.0.7 and V1.9.7, and V1600G2 V1.1.4 OLT devices. An low-privileged (non-admin) attacker can use a hardcoded password (4ef9cea10b2362f15ba4558b1d5c081f) to create an admin user. Se detectó un problema en los dispositivos OLT V-SOL V1600D versiones V2.03.69 y V2.03.57, V1600D4L versión V1.01.49, V1600D-MINI versión V1.01.48, V1600G1 versiones V2.0.7 y V1.9.7, y V1600G2 versión V1.1.4. Un atacante ... • https://seclists.org/fulldisclosure/2020/Jul/14 • CWE-798: Use of Hard-coded Credentials •

CVSS: 9.8EPSS: 1%CPEs: 12EXPL: 1

CVE-2020-29376

https://notcve.org/view.php?id=CVE-2020-29376

29 Nov 2020 — An issue was discovered on V-SOL V1600D V2.03.69 and V2.03.57, V1600D4L V1.01.49, V1600D-MINI V1.01.48, V1600G1 V2.0.7 and V1.9.7, and V1600G2 V1.1.4 OLT devices. There is an !j@l#y$z%x6x7q8c9z) password for the admin account to authenticate to the TELNET service. Se detectó un problema en los dispositivos OLT V-SOL V1600D versiones V2.03.69 y V2.03.57, V1600D4L versión V1.01.49, V1600D-MINI versión V1.01.48, V1600G1 versiones V2.0.7 y V1.9.7, y V1600G2 versión V1.1.4. Se presenta una contraseña ! • https://seclists.org/fulldisclosure/2020/Jul/14 • CWE-798: Use of Hard-coded Credentials •

CVSS: 9.0EPSS: 0%CPEs: 12EXPL: 0

CVE-2020-29378

https://notcve.org/view.php?id=CVE-2020-29378

29 Nov 2020 — An issue was discovered on V-SOL V1600D V2.03.69 and V2.03.57, V1600D4L V1.01.49, V1600D-MINI V1.01.48, V1600G1 V2.0.7 and V1.9.7, and V1600G2 V1.1.4 OLT devices. It is possible to elevate the privilege of a CLI user (to full administrative access) by using the password !j@l#y$z%x6x7q8c9z) for the enable command. Se detectó un problema en los dispositivos OLT V-SOL V1600D versiones V2.03.69 y V2.03.57, V1600D4L versión V1.01.49, V1600D-MINI versión V1.01.48, V1600G1 versiones V2.0.7 y V1.9.7, y V1600G2 vers... • https://seclists.org/fulldisclosure/2020/Jul/14 • CWE-287: Improper Authentication •

CVSS: 5.9EPSS: 0%CPEs: 12EXPL: 0

CVE-2020-29380

https://notcve.org/view.php?id=CVE-2020-29380

29 Nov 2020 — An issue was discovered on V-SOL V1600D V2.03.69 and V2.03.57, V1600D4L V1.01.49, V1600D-MINI V1.01.48, V1600G1 V2.0.7 and V1.9.7, and V1600G2 V1.1.4 OLT devices. TELNET is offered by default but SSH is not always available. An attacker can intercept passwords sent in cleartext and conduct a man-in-the-middle attack on the management of the appliance. Se detectó un problema en los dispositivos OLT V-SOL V1600D versiones V2.03.69 y V2.03.57, V1600D4L versión V1.01.49, V1600D-MINI versión V1.01.48, V1600G1 ve... • https://seclists.org/fulldisclosure/2020/Jul/14 • CWE-319: Cleartext Transmission of Sensitive Information CWE-522: Insufficiently Protected Credentials •

CVSS: 10.0EPSS: 0%CPEs: 12EXPL: 0

CVE-2020-29381

https://notcve.org/view.php?id=CVE-2020-29381

29 Nov 2020 — An issue was discovered on V-SOL V1600D V2.03.69 and V2.03.57, V1600D4L V1.01.49, V1600D-MINI V1.01.48, V1600G1 V2.0.7 and V1.9.7, and V1600G2 V1.1.4 OLT devices. Command injection can occur in "upload tftp syslog" and "upload tftp configuration" in the CLI via a crafted filename. Se detectó un problema en los dispositivos OLT V-SOL V1600D versiones V2.03.69 y V2.03.57, V1600D4L versión V1.01.49, V1600D-MINI versión V1.01.48, V1600G1 versiones V2.0.7 y V1.9.7, y V1600G2 versión V1.1.4. Una inyección de... • https://seclists.org/fulldisclosure/2020/Jul/14 • CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') •

CVSS: 7.8EPSS: 0%CPEs: 8EXPL: 1

CVE-2020-29382

https://notcve.org/view.php?id=CVE-2020-29382

29 Nov 2020 — An issue was discovered on V-SOL V1600D V2.03.69 and V2.03.57, V1600G1 V2.0.7 and V1.9.7, and V1600G2 V1.1.4 OLT devices. A hardcoded RSA private key (specific to V1600D, V1600G1, and V1600G2) is contained in the firmware images. Se detectó un problema en los dispositivos OLT V-SOL V1600D versiones V2.03.69 y V2.03.57, V1600G1 versiones V2.0.7 y V1.9.7, y V1600G2 versión V1.1.4. Una clave privada RSA embebida (específica de V1600D, V1600G1 y V1600G2) está contenida en las imagenes del firmware • https://seclists.org/fulldisclosure/2020/Jul/14 • CWE-798: Use of Hard-coded Credentials •