{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "descriptions": [{"lang": "en", "value": "An issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 97168P, FD1002S, FD1104, FD1104B, FD1104S, FD1104SN, FD1108S, FD1204S-R2, FD1204SN, FD1204SN-R2, FD1208S-R2, FD1216S-R1, FD1608GS, FD1608SN, FD1616GS, FD1616SN, and FD8000 devices. One can escape from a shell and acquire root privileges by leveraging the TFTP download configuration."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2020-11-24T21:00:13", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://pierrekim.github.io/blog/2020-07-07-cdata-olt-0day-vulnerabilities.html"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "[email protected]", "ID": "CVE-2020-29056", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "An issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 97168P, FD1002S, FD1104, FD1104B, FD1104S, FD1104SN, FD1108S, FD1204S-R2, FD1204SN, FD1204SN-R2, FD1208S-R2, FD1216S-R1, FD1608GS, FD1608SN, FD1616GS, FD1616SN, and FD8000 devices. One can escape from a shell and acquire root privileges by leveraging the TFTP download configuration."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "https://pierrekim.github.io/blog/2020-07-07-cdata-olt-0day-vulnerabilities.html", "refsource": "MISC", "url": "https://pierrekim.github.io/blog/2020-07-07-cdata-olt-0day-vulnerabilities.html"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-04T16:48:01.269Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://pierrekim.github.io/blog/2020-07-07-cdata-olt-0day-vulnerabilities.html"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2020-29056", "datePublished": "2020-11-24T21:00:13", "dateReserved": "2020-11-24T00:00:00", "dateUpdated": "2024-08-04T16:48:01.269Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cdatatec:72408a_firmware:1.2.2:*:*:*:*:*:*:*", "matchCriteriaId": "EBC2AA64-F311-4B3F-902E-EED851475822", "vulnerable": true}, {"criteria": "cpe:2.3:o:cdatatec:72408a_firmware:2.4.03_000:*:*:*:*:*:*:*", "matchCriteriaId": "2BE3C93D-FD99-4AC7-8A5C-1E60AAB7BE26", "vulnerable": true}, {"criteria": "cpe:2.3:o:cdatatec:72408a_firmware:2.4.04_001:*:*:*:*:*:*:*", "matchCriteriaId": "5ECAE9D0-853A-403C-8E22-41CCE3129D3D", "vulnerable": true}, {"criteria": "cpe:2.3:o:cdatatec:72408a_firmware:2.4.05_000:*:*:*:*:*:*:*", "matchCriteriaId": "7D99AD2A-102F-4541-A231-01CEAA6AB282", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cdatatec:72408a:-:*:*:*:*:*:*:*", "matchCriteriaId": "91CA97A4-4B03-4906-B311-7AE27675B63C", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cdatatec:9008a_firmware:1.2.2:*:*:*:*:*:*:*", "matchCriteriaId": "6C7191DD-A6F8-4CE6-95CC-247AB7CAB3FC", "vulnerable": true}, {"criteria": "cpe:2.3:o:cdatatec:9008a_firmware:2.4.03_000:*:*:*:*:*:*:*", "matchCriteriaId": "68E45FBA-A63B-4B51-A909-73C1C2846C25", "vulnerable": true}, {"criteria": "cpe:2.3:o:cdatatec:9008a_firmware:2.4.04_001:*:*:*:*:*:*:*", "matchCriteriaId": "57C5C03D-9A9E-4ACD-B654-7ADE56B2223A", "vulnerable": true}, {"criteria": "cpe:2.3:o:cdatatec:9008a_firmware:2.4.05_000:*:*:*:*:*:*:*", "matchCriteriaId": "6BBC8031-7EC4-492A-9A46-46588847EABE", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cdatatec:9008a:-:*:*:*:*:*:*:*", "matchCriteriaId": "4AE26F07-9931-4822-8C97-581C43C532BF", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cdatatec:9016a_firmware:1.2.2:*:*:*:*:*:*:*", "matchCriteriaId": "D9AE4607-AC87-4370-A16A-9C085140908C", "vulnerable": true}, {"criteria": "cpe:2.3:o:cdatatec:9016a_firmware:2.4.03_000:*:*:*:*:*:*:*", "matchCriteriaId": "26DABAC7-F9D4-44FE-84F2-C4540187415E", "vulnerable": true}, {"criteria": "cpe:2.3:o:cdatatec:9016a_firmware:2.4.04_001:*:*:*:*:*:*:*", "matchCriteriaId": "29BD8D03-A96F-4B3F-9E05-45B4C4476D68", "vulnerable": true}, {"criteria": "cpe:2.3:o:cdatatec:9016a_firmware:2.4.05_000:*:*:*:*:*:*:*", "matchCriteriaId": "CCCD4A8A-0408-4A49-A562-9FFBCBE15EC0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cdatatec:9016a:-:*:*:*:*:*:*:*", "matchCriteriaId": "C0C2BB09-C795-4E47-BCCB-FA864DA6FC4E", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cdatatec:92408a_firmware:1.2.2:*:*:*:*:*:*:*", "matchCriteriaId": "91B1F3B0-A301-49B0-B118-CEA39FE6B117", "vulnerable": true}, {"criteria": "cpe:2.3:o:cdatatec:92408a_firmware:2.4.03_000:*:*:*:*:*:*:*", "matchCriteriaId": "E51C85C3-0DB9-4FD8-84AF-0C1F6ED053DA", "vulnerable": true}, {"criteria": "cpe:2.3:o:cdatatec:92408a_firmware:2.4.04_001:*:*:*:*:*:*:*", "matchCriteriaId": "F058391F-C581-425E-8695-8B5A60452EDD", "vulnerable": true}, {"criteria": "cpe:2.3:o:cdatatec:92408a_firmware:2.4.05_000:*:*:*:*:*:*:*", "matchCriteriaId": "685A2CCE-B3AB-461E-B855-BF17BB131698", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cdatatec:92408a:-:*:*:*:*:*:*:*", "matchCriteriaId": "8BC20277-24FD-41A9-81D1-B04BC0EAA134", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cdatatec:92416a_firmware:1.2.2:*:*:*:*:*:*:*", "matchCriteriaId": "9B394B79-38F5-4DCF-B523-2B4644199F4D", "vulnerable": true}, {"criteria": "cpe:2.3:o:cdatatec:92416a_firmware:2.4.03_000:*:*:*:*:*:*:*", "matchCriteriaId": "C0C97B2E-F642-4792-B1F2-A222FCDA9BA7", "vulnerable": true}, {"criteria": "cpe:2.3:o:cdatatec:92416a_firmware:2.4.04_001:*:*:*:*:*:*:*", "matchCriteriaId": "F86D3943-EBF6-4F4C-AD63-49ECBD137CC7", "vulnerable": true}, {"criteria": "cpe:2.3:o:cdatatec:92416a_firmware:2.4.05_000:*:*:*:*:*:*:*", "matchCriteriaId": "C1138A72-8345-4D6C-83EA-463C3983B489", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cdatatec:92416a:-:*:*:*:*:*:*:*", "matchCriteriaId": "B2F2EC0A-FC5C-4253-A89D-CB122D605873", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cdatatec:9288_firmware:1.2.2:*:*:*:*:*:*:*", "matchCriteriaId": "1694A2E9-60B0-406A-A59F-C652BABE0488", "vulnerable": true}, {"criteria": "cpe:2.3:o:cdatatec:9288_firmware:2.4.03_000:*:*:*:*:*:*:*", "matchCriteriaId": "06B462CD-FF96-4B74-8193-0E041C07CF4F", "vulnerable": true}, {"criteria": "cpe:2.3:o:cdatatec:9288_firmware:2.4.04_001:*:*:*:*:*:*:*", "matchCriteriaId": "85F1B8C8-B4C9-41E7-B96F-F595202F19EF", "vulnerable": true}, {"criteria": "cpe:2.3:o:cdatatec:9288_firmware:2.4.05_000:*:*:*:*:*:*:*", "matchCriteriaId": "70F2E723-613A-497D-AD99-DE322CAE9F1D", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cdatatec:9288:-:*:*:*:*:*:*:*", "matchCriteriaId": "9D22C33F-82D7-4EA3-AF18-7B38C42D1A83", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cdatatec:97016_firmware:1.2.2:*:*:*:*:*:*:*", "matchCriteriaId": "55D745A4-7E22-4B8E-B001-237B6A47214C", "vulnerable": true}, {"criteria": "cpe:2.3:o:cdatatec:97016_firmware:2.4.03_000:*:*:*:*:*:*:*", "matchCriteriaId": "F0EAFFD4-6A63-4C47-8B49-71B521BEE2E7", "vulnerable": true}, {"criteria": "cpe:2.3:o:cdatatec:97016_firmware:2.4.04_001:*:*:*:*:*:*:*", "matchCriteriaId": "3BA4E77F-F82E-434D-AE78-ADDC68FF25C0", "vulnerable": true}, {"criteria": "cpe:2.3:o:cdatatec:97016_firmware:2.4.05_000:*:*:*:*:*:*:*", "matchCriteriaId": "316E33CF-C139-488E-AD8F-C06A0E65AE6A", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cdatatec:97016:-:*:*:*:*:*:*:*", "matchCriteriaId": "7C81B2F2-FC2C-4FC4-B403-3A1664C8A414", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cdatatec:97024p_firmware:1.2.2:*:*:*:*:*:*:*", "matchCriteriaId": "8D70FF95-4DBC-45FA-BDE1-E3F076EF6C4C", "vulnerable": true}, {"criteria": "cpe:2.3:o:cdatatec:97024p_firmware:2.4.03_000:*:*:*:*:*:*:*", "matchCriteriaId": "CE9E6EFF-5016-4B82-9AA8-51EA91454879", "vulnerable": true}, {"criteria": "cpe:2.3:o:cdatatec:97024p_firmware:2.4.04_001:*:*:*:*:*:*:*", "matchCriteriaId": "9ABA89C6-C083-4AB6-A639-44E9D2154AED", "vulnerable": true}, {"criteria": "cpe:2.3:o:cdatatec:97024p_firmware:2.4.05_000:*:*:*:*:*:*:*", "matchCriteriaId": "7E564D53-00D4-4BEA-8C71-23D7F127D2C7", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cdatatec:97024p:-:*:*:*:*:*:*:*", "matchCriteriaId": "2D8D478B-7F65-4E1D-941C-D26D71794CEA", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cdatatec:97028p_firmware:1.2.2:*:*:*:*:*:*:*", "matchCriteriaId": "06571EFF-6C4A-4251-B362-6D5639298C50", "vulnerable": true}, {"criteria": "cpe:2.3:o:cdatatec:97028p_firmware:2.4.03_000:*:*:*:*:*:*:*", "matchCriteriaId": "49E84A28-00D7-4C0C-8374-16BA9A2DE8F4", "vulnerable": true}, {"criteria": "cpe:2.3:o:cdatatec:97028p_firmware:2.4.04_001:*:*:*:*:*:*:*", "matchCriteriaId": "2E2BFED1-4913-482D-A406-608871AB3675", "vulnerable": true}, {"criteria": "cpe:2.3:o:cdatatec:97028p_firmware:2.4.05_000:*:*:*:*:*:*:*", "matchCriteriaId": "8C92EB03-57CA-40CB-B8C7-7997B9F83A65", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cdatatec:97028p:-:*:*:*:*:*:*:*", "matchCriteriaId": "4A1D87C1-3A4F-48D1-B7F1-11DC42C74322", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cdatatec:97042p_firmware:1.2.2:*:*:*:*:*:*:*", "matchCriteriaId": "753B8AA4-B6AF-4422-9042-15C25FA4C567", "vulnerable": true}, {"criteria": "cpe:2.3:o:cdatatec:97042p_firmware:2.4.03_000:*:*:*:*:*:*:*", "matchCriteriaId": "229F9D3C-3059-4058-9D5A-9B4EA276BEF9", "vulnerable": true}, {"criteria": "cpe:2.3:o:cdatatec:97042p_firmware:2.4.04_001:*:*:*:*:*:*:*", "matchCriteriaId": "0C3F0457-8AEC-49F1-A26A-A6CD80CC9F50", "vulnerable": true}, {"criteria": "cpe:2.3:o:cdatatec:97042p_firmware:2.4.05_000:*:*:*:*:*:*:*", "matchCriteriaId": "5685BD02-BF1A-426A-8BE0-065A1ED27BBA", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cdatatec:97042p:-:*:*:*:*:*:*:*", "matchCriteriaId": "761C5343-67B3-4022-906C-C1528A0E415E", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cdatatec:97084p_firmware:1.2.2:*:*:*:*:*:*:*", "matchCriteriaId": "FB48509B-1705-415D-9116-5DB0C722B6A0", "vulnerable": true}, {"criteria": "cpe:2.3:o:cdatatec:97084p_firmware:2.4.03_000:*:*:*:*:*:*:*", "matchCriteriaId": "B6232A6B-B59D-4946-8CA4-12CC131FA869", "vulnerable": true}, {"criteria": "cpe:2.3:o:cdatatec:97084p_firmware:2.4.04_001:*:*:*:*:*:*:*", "matchCriteriaId": "8E0B6473-BDE1-4DF6-9ECC-47B79705B52F", "vulnerable": true}, {"criteria": "cpe:2.3:o:cdatatec:97084p_firmware:2.4.05_000:*:*:*:*:*:*:*", "matchCriteriaId": "F5F161C1-91BA-4221-9318-44CBD9C50805", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cdatatec:97084p:-:*:*:*:*:*:*:*", "matchCriteriaId": "99F91C38-3B77-4E0D-852C-9A76A03B92B4", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cdatatec:97168p_firmware:1.2.2:*:*:*:*:*:*:*", "matchCriteriaId": "43878328-9EB9-4F72-8CE3-0380C097B3F2", "vulnerable": true}, {"criteria": "cpe:2.3:o:cdatatec:97168p_firmware:2.4.03_000:*:*:*:*:*:*:*", "matchCriteriaId": "4BF0C0AE-8413-4C7E-9E80-69CFB2D6D806", "vulnerable": true}, {"criteria": "cpe:2.3:o:cdatatec:97168p_firmware:2.4.04_001:*:*:*:*:*:*:*", "matchCriteriaId": "BE488700-3282-47C7-994B-550E68F061A0", "vulnerable": true}, {"criteria": "cpe:2.3:o:cdatatec:97168p_firmware:2.4.05_000:*:*:*:*:*:*:*", "matchCriteriaId": "A0027058-DFBB-468B-BB0C-B7818FC8A9AD", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cdatatec:97168p:-:*:*:*:*:*:*:*", "matchCriteriaId": "75622476-415D-48A7-92AE-67524D226730", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cdatatec:fd1002s_firmware:1.2.2:*:*:*:*:*:*:*", "matchCriteriaId": "C0E9EE8E-7258-4FD0-9F30-3D4AAD4E35E1", "vulnerable": true}, {"criteria": "cpe:2.3:o:cdatatec:fd1002s_firmware:2.4.03_000:*:*:*:*:*:*:*", "matchCriteriaId": "C2CA486F-8FA4-4910-9C73-73E8A9D38729", "vulnerable": true}, {"criteria": "cpe:2.3:o:cdatatec:fd1002s_firmware:2.4.04_001:*:*:*:*:*:*:*", "matchCriteriaId": "8BD937F4-8C5A-4BCB-BFB6-CE92CD99D447", "vulnerable": true}, {"criteria": "cpe:2.3:o:cdatatec:fd1002s_firmware:2.4.05_000:*:*:*:*:*:*:*", "matchCriteriaId": "3E9BE88C-5B60-4CE9-9170-F79CFD97880E", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cdatatec:fd1002s:-:*:*:*:*:*:*:*", "matchCriteriaId": "DB045326-4BD3-4565-8BCB-0EE383F4B5C0", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cdata:fd1104_firmware:2.4.03_000:*:*:*:*:*:*:*", "matchCriteriaId": "E6B17D17-D59C-40C9-A150-FF0D9089DF93", "vulnerable": true}, {"criteria": "cpe:2.3:o:cdatatec:fd1104_firmware:1.2.2:*:*:*:*:*:*:*", "matchCriteriaId": "32152BE8-89F5-466C-9F6F-4373F28FB165", "vulnerable": true}, {"criteria": "cpe:2.3:o:cdatatec:fd1104_firmware:2.4.04_001:*:*:*:*:*:*:*", "matchCriteriaId": "C503D971-F72E-4647-A05E-1B921F17511D", "vulnerable": true}, {"criteria": "cpe:2.3:o:cdatatec:fd1104_firmware:2.4.05_000:*:*:*:*:*:*:*", "matchCriteriaId": "E7C2A6AA-902D-405C-911E-380C8E5200E6", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cdatatec:fd1104:-:*:*:*:*:*:*:*", "matchCriteriaId": "A21F5953-F451-43C2-B372-32AED9FC1041", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cdatatec:fd1104b_firmware:1.2.2:*:*:*:*:*:*:*", "matchCriteriaId": "1533508A-F35C-4D2D-A35E-E4B06ACCB76E", "vulnerable": true}, {"criteria": "cpe:2.3:o:cdatatec:fd1104b_firmware:2.4.03_000:*:*:*:*:*:*:*", "matchCriteriaId": "32C44211-94D9-44CD-A974-3B5B5EB19CD5", "vulnerable": true}, {"criteria": "cpe:2.3:o:cdatatec:fd1104b_firmware:2.4.04_001:*:*:*:*:*:*:*", "matchCriteriaId": "5645AE9B-BC2D-487A-A434-5871B1C2B9A3", "vulnerable": true}, {"criteria": "cpe:2.3:o:cdatatec:fd1104b_firmware:2.4.05_000:*:*:*:*:*:*:*", "matchCriteriaId": "17BF8272-AE86-4B2D-BD35-A2AAACBD1A11", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cdatatec:fd1104b:-:*:*:*:*:*:*:*", "matchCriteriaId": "ABB8F912-74BA-40E2-B369-F643AC86C851", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cdatatec:fd1104s_firmware:1.2.2:*:*:*:*:*:*:*", "matchCriteriaId": "6DE4434E-B330-4C29-B013-BE13A5F164FD", "vulnerable": true}, {"criteria": "cpe:2.3:o:cdatatec:fd1104s_firmware:2.4.03_000:*:*:*:*:*:*:*", "matchCriteriaId": "6FF61B3C-5D91-4D8C-99CE-B53038C51274", "vulnerable": true}, {"criteria": "cpe:2.3:o:cdatatec:fd1104s_firmware:2.4.04_001:*:*:*:*:*:*:*", "matchCriteriaId": "CC424FFE-27D6-4A34-BD99-477D44C96D52", "vulnerable": true}, {"criteria": "cpe:2.3:o:cdatatec:fd1104s_firmware:2.4.05_000:*:*:*:*:*:*:*", "matchCriteriaId": "CD912DC4-1C5A-4156-BA81-84EEA9D93B43", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cdatatec:fd1104s:-:*:*:*:*:*:*:*", "matchCriteriaId": "9151EE7E-9CE6-4FA2-9347-BA36C6EAF70A", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cdatatec:fd1104sn_firmware:1.2.2:*:*:*:*:*:*:*", "matchCriteriaId": "1D0304E6-469D-4AA5-9D8D-7CD5E1670628", "vulnerable": true}, {"criteria": "cpe:2.3:o:cdatatec:fd1104sn_firmware:2.4.03_000:*:*:*:*:*:*:*", "matchCriteriaId": "40762880-19B7-440A-BA8B-2DAA0BA5E004", "vulnerable": true}, {"criteria": "cpe:2.3:o:cdatatec:fd1104sn_firmware:2.4.04_001:*:*:*:*:*:*:*", "matchCriteriaId": "033AC137-2139-4CD4-A16F-F3C1839F2623", "vulnerable": true}, {"criteria": "cpe:2.3:o:cdatatec:fd1104sn_firmware:2.4.05_000:*:*:*:*:*:*:*", "matchCriteriaId": "B84DAACA-3BD0-46A4-B2DC-3CCCAE1ED40C", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cdatatec:fd1104sn:-:*:*:*:*:*:*:*", "matchCriteriaId": "FFC597B6-9D90-43F5-BED9-1EECA5A17E70", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cdatatec:fd1108s_firmware:1.2.2:*:*:*:*:*:*:*", "matchCriteriaId": "38F7BE4A-FB3B-49E3-B103-1C8D8B58BDEB", "vulnerable": true}, {"criteria": "cpe:2.3:o:cdatatec:fd1108s_firmware:2.4.03_000:*:*:*:*:*:*:*", "matchCriteriaId": "ADC635E4-AFA8-4B79-8B62-3C17AAC05707", "vulnerable": true}, {"criteria": "cpe:2.3:o:cdatatec:fd1108s_firmware:2.4.04_001:*:*:*:*:*:*:*", "matchCriteriaId": "5BAD0840-1ACD-4074-8834-FD714A94057F", "vulnerable": true}, {"criteria": "cpe:2.3:o:cdatatec:fd1108s_firmware:2.4.05_000:*:*:*:*:*:*:*", "matchCriteriaId": "6A16A8AC-3F3D-4D67-9EE2-59AD109B6695", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cdatatec:fd1108s:-:*:*:*:*:*:*:*", "matchCriteriaId": "F5A100E1-76E9-4104-A998-E5148934271B", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cdatatec:fd1204s-r2_firmware:1.2.2:*:*:*:*:*:*:*", "matchCriteriaId": "359AF483-ADA3-4FFD-9E41-386468747132", "vulnerable": true}, {"criteria": "cpe:2.3:o:cdatatec:fd1204s-r2_firmware:2.4.03_000:*:*:*:*:*:*:*", "matchCriteriaId": "55429C6B-D10C-41D6-B56D-2A227B15CA38", "vulnerable": true}, {"criteria": "cpe:2.3:o:cdatatec:fd1204s-r2_firmware:2.4.04_001:*:*:*:*:*:*:*", "matchCriteriaId": "E794B117-0C23-4CF8-8F1F-AD8EB5963970", "vulnerable": true}, {"criteria": "cpe:2.3:o:cdatatec:fd1204s-r2_firmware:2.4.05_000:*:*:*:*:*:*:*", "matchCriteriaId": "A7FBF947-6A35-4973-A8BD-C33191C439A1", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cdatatec:fd1204s-r2:-:*:*:*:*:*:*:*", "matchCriteriaId": "236860E7-4350-4D6B-A864-5239CE8A616B", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cdatatec:fd1204sn_firmware:1.2.2:*:*:*:*:*:*:*", "matchCriteriaId": "07548C2F-C04A-4D95-BD22-5A62C11DF721", "vulnerable": true}, {"criteria": "cpe:2.3:o:cdatatec:fd1204sn_firmware:2.4.03_000:*:*:*:*:*:*:*", "matchCriteriaId": "37E86A04-AA7E-4EC2-AA6B-FA0A9221969D", "vulnerable": true}, {"criteria": "cpe:2.3:o:cdatatec:fd1204sn_firmware:2.4.04_001:*:*:*:*:*:*:*", "matchCriteriaId": "A573827E-4D3E-4321-945E-01F69DB9D28E", "vulnerable": true}, {"criteria": "cpe:2.3:o:cdatatec:fd1204sn_firmware:2.4.05_000:*:*:*:*:*:*:*", "matchCriteriaId": "849DA562-E65C-41AF-A52D-7832BCEB295D", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cdatatec:fd1204sn:-:*:*:*:*:*:*:*", "matchCriteriaId": "51F80C29-9EF1-4C49-B22F-B47015B7B36D", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cdatatec:fd1204sn-r2_firmware:1.2.2:*:*:*:*:*:*:*", "matchCriteriaId": "4E2899BA-3F16-483A-9F0B-3A3F98CC6BA3", "vulnerable": true}, {"criteria": "cpe:2.3:o:cdatatec:fd1204sn-r2_firmware:2.4.03_000:*:*:*:*:*:*:*", "matchCriteriaId": "12D791F5-001B-452D-8C7F-DD1A72A51E65", "vulnerable": true}, {"criteria": "cpe:2.3:o:cdatatec:fd1204sn-r2_firmware:2.4.04_001:*:*:*:*:*:*:*", "matchCriteriaId": "0F8BA9D7-4CDE-48E9-8E8C-B0FAF90F6325", "vulnerable": true}, {"criteria": "cpe:2.3:o:cdatatec:fd1204sn-r2_firmware:2.4.05_000:*:*:*:*:*:*:*", "matchCriteriaId": "DCD429D5-6890-44AC-BDA2-5C660E084A13", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cdatatec:fd1204sn-r2:-:*:*:*:*:*:*:*", "matchCriteriaId": "6DABF317-11C8-4E7D-8B78-32C8B83B0062", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cdatatec:fd1208s-r2_firmware:1.2.2:*:*:*:*:*:*:*", "matchCriteriaId": "615FD372-6B52-4B62-AAC2-15763D9CCBEE", "vulnerable": true}, {"criteria": "cpe:2.3:o:cdatatec:fd1208s-r2_firmware:2.4.03_000:*:*:*:*:*:*:*", "matchCriteriaId": "ABB9FAD6-D238-43B6-A545-B0C5C409692B", "vulnerable": true}, {"criteria": "cpe:2.3:o:cdatatec:fd1208s-r2_firmware:2.4.04_001:*:*:*:*:*:*:*", "matchCriteriaId": "C1416B82-F7FB-42B8-AF28-84B10307F89A", "vulnerable": true}, {"criteria": "cpe:2.3:o:cdatatec:fd1208s-r2_firmware:2.4.05_000:*:*:*:*:*:*:*", "matchCriteriaId": "3CA676F8-89FC-4DB5-851F-ED88577AD1CA", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cdatatec:fd1208s-r2:-:*:*:*:*:*:*:*", "matchCriteriaId": "9E553B18-A32D-41CD-B3DF-0448FB180B20", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cdatatec:fd1216s-r1_firmware:1.2.2:*:*:*:*:*:*:*", "matchCriteriaId": "30090657-DC7F-445E-BA37-11CD8451C420", "vulnerable": true}, {"criteria": "cpe:2.3:o:cdatatec:fd1216s-r1_firmware:2.4.03_000:*:*:*:*:*:*:*", "matchCriteriaId": "EF708B9B-31B9-487C-9002-D212E8088CCB", "vulnerable": true}, {"criteria": "cpe:2.3:o:cdatatec:fd1216s-r1_firmware:2.4.04_001:*:*:*:*:*:*:*", "matchCriteriaId": "44C0F95B-402F-482C-8A2E-D88CB903AB85", "vulnerable": true}, {"criteria": "cpe:2.3:o:cdatatec:fd1216s-r1_firmware:2.4.05_000:*:*:*:*:*:*:*", "matchCriteriaId": "7A501BAA-E29A-46C6-AFE2-044AC76E072A", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cdatatec:fd1216s-r1:-:*:*:*:*:*:*:*", "matchCriteriaId": "128AD79D-1CE5-4081-8FD2-7F073245DC37", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cdatatec:fd1608gs_firmware:1.2.2:*:*:*:*:*:*:*", "matchCriteriaId": "32151B40-9DD5-402B-94A5-F92CF10F8B9E", "vulnerable": true}, {"criteria": "cpe:2.3:o:cdatatec:fd1608gs_firmware:2.4.03_000:*:*:*:*:*:*:*", "matchCriteriaId": "FD0E03AA-32B1-4F77-8530-1BA16E0C3CEF", "vulnerable": true}, {"criteria": "cpe:2.3:o:cdatatec:fd1608gs_firmware:2.4.04_001:*:*:*:*:*:*:*", "matchCriteriaId": "B6A6F460-9F40-43D4-B5BC-687E2154265D", "vulnerable": true}, {"criteria": "cpe:2.3:o:cdatatec:fd1608gs_firmware:2.4.05_000:*:*:*:*:*:*:*", "matchCriteriaId": "B4DC0FB1-8137-48B6-945D-6F928E977E79", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cdatatec:fd1608gs:-:*:*:*:*:*:*:*", "matchCriteriaId": "68BF86AF-CFEC-4198-A7B2-718A3537210A", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cdatatec:fd1608sn_firmware:1.2.2:*:*:*:*:*:*:*", "matchCriteriaId": "DFF52B10-1DD0-406D-8E1F-3D3DFD695115", "vulnerable": true}, {"criteria": "cpe:2.3:o:cdatatec:fd1608sn_firmware:2.4.03_000:*:*:*:*:*:*:*", "matchCriteriaId": "E8546F7D-A674-4DAA-810D-9F85399E20F5", "vulnerable": true}, {"criteria": "cpe:2.3:o:cdatatec:fd1608sn_firmware:2.4.04_001:*:*:*:*:*:*:*", "matchCriteriaId": "CF59A57F-C18B-460F-9D65-0FFFDF07D5A9", "vulnerable": true}, {"criteria": "cpe:2.3:o:cdatatec:fd1608sn_firmware:2.4.05_000:*:*:*:*:*:*:*", "matchCriteriaId": "B966D986-B773-4FEE-BB4A-996693563F1A", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cdatatec:fd1608sn:-:*:*:*:*:*:*:*", "matchCriteriaId": "F6EA293F-E0CF-432D-BBBB-7D4E56C8631C", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cdatatec:fd1616gs_firmware:1.2.2:*:*:*:*:*:*:*", "matchCriteriaId": "0260EA43-7412-4087-92DB-B99891A0ED33", "vulnerable": true}, {"criteria": "cpe:2.3:o:cdatatec:fd1616gs_firmware:2.4.03_000:*:*:*:*:*:*:*", "matchCriteriaId": "D6C7B8C5-8D23-4A32-97DB-281E79818D97", "vulnerable": true}, {"criteria": "cpe:2.3:o:cdatatec:fd1616gs_firmware:2.4.04_001:*:*:*:*:*:*:*", "matchCriteriaId": "9724CC44-FF85-4646-9D0E-81BB8B22336D", "vulnerable": true}, {"criteria": "cpe:2.3:o:cdatatec:fd1616gs_firmware:2.4.05_000:*:*:*:*:*:*:*", "matchCriteriaId": "AA162BB3-213C-42E5-912D-4C99D869A6FC", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cdatatec:fd1616gs:-:*:*:*:*:*:*:*", "matchCriteriaId": "3BC0383B-F2FE-4359-868E-5DF46981274A", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cdatatec:fd1616sn_firmware:1.2.2:*:*:*:*:*:*:*", "matchCriteriaId": "9E12B676-980E-4348-A9E3-3876209A2FF0", "vulnerable": true}, {"criteria": "cpe:2.3:o:cdatatec:fd1616sn_firmware:2.4.03_000:*:*:*:*:*:*:*", "matchCriteriaId": "80C58F0A-04B9-412C-893D-B559578498CF", "vulnerable": true}, {"criteria": "cpe:2.3:o:cdatatec:fd1616sn_firmware:2.4.04_001:*:*:*:*:*:*:*", "matchCriteriaId": "71CF0D8F-4126-4823-9C52-440EB4960A9F", "vulnerable": true}, {"criteria": "cpe:2.3:o:cdatatec:fd1616sn_firmware:2.4.05_000:*:*:*:*:*:*:*", "matchCriteriaId": "AAB011FB-0412-42CF-AF8B-579CBE657A23", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cdatatec:fd1616sn:-:*:*:*:*:*:*:*", "matchCriteriaId": "C5C09DCB-1317-4146-AA26-4CA4E2C02CE4", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cdatatec:fd8000_firmware:1.2.2:*:*:*:*:*:*:*", "matchCriteriaId": "591BC672-1D01-434A-A993-48F0F05B8871", "vulnerable": true}, {"criteria": "cpe:2.3:o:cdatatec:fd8000_firmware:2.4.03_000:*:*:*:*:*:*:*", "matchCriteriaId": "622223DD-B055-4BE2-AD51-4875651EAFB0", "vulnerable": true}, {"criteria": "cpe:2.3:o:cdatatec:fd8000_firmware:2.4.04_001:*:*:*:*:*:*:*", "matchCriteriaId": "956DB3E9-B3A5-450D-9791-490C8594928B", "vulnerable": true}, {"criteria": "cpe:2.3:o:cdatatec:fd8000_firmware:2.4.05_000:*:*:*:*:*:*:*", "matchCriteriaId": "504A0AE3-BC43-46AB-B4CA-00A943E4E429", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cdatatec:fd8000:-:*:*:*:*:*:*:*", "matchCriteriaId": "9BDE7F4E-4663-4155-B818-462A65D5F362", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "An issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 97168P, FD1002S, FD1104, FD1104B, FD1104S, FD1104SN, FD1108S, FD1204S-R2, FD1204SN, FD1204SN-R2, FD1208S-R2, FD1216S-R1, FD1608GS, FD1608SN, FD1616GS, FD1616SN, and FD8000 devices. One can escape from a shell and acquire root privileges by leveraging the TFTP download configuration."}, {"lang": "es", "value": "Se detect\u00f3 un problema en Dispositivos CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 97168P, FD1002S, FD1104, FD1104B, FD1104S, FD20D1104SN, FD1104S, FD20D1104SN, R220D1104SN-R2, FD1208S-R2, FD1216S-R1, FD1608GS, FD1608SN, FD1616GS, FD1616SN y FD8000. Uno puede escapar de un shell y adquirir privilegios de root aprovechando la configuraci\u00f3n de descarga TFTP"}], "id": "CVE-2020-29056", "lastModified": "2024-11-21T05:23:36.300", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 10.0, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 10.0, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "[email protected]", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "[email protected]", "type": "Primary"}]}, "published": "2020-11-24T21:15:11.853", "references": [{"source": "[email protected]", "tags": ["Exploit", "Third Party Advisory"], "url": "https://pierrekim.github.io/blog/2020-07-07-cdata-olt-0day-vulnerabilities.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Third Party Advisory"], "url": "https://pierrekim.github.io/blog/2020-07-07-cdata-olt-0day-vulnerabilities.html"}], "sourceIdentifier": "[email protected]", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-78"}], "source": "[email protected]", "type": "Primary"}]}

{}