CVE-2020-29375 | ByteOS Network

Vulnerability Details :

CVE-2020-29375

Assigner-mitre

Assigner Org ID-8254265b-2729-46b6-b9e3-3dfca2d5bfca

Published At-29 Nov, 2020 | 00:47

Updated At-04 Aug, 2024 | 16:48

An issue was discovered on V-SOL V1600D V2.03.69 and V2.03.57, V1600D4L V1.01.49, V1600D-MINI V1.01.48, V1600G1 V2.0.7 and V1.9.7, and V1600G2 V1.1.4 OLT devices. An low-privileged (non-admin) attacker can use a hardcoded password (4ef9cea10b2362f15ba4558b1d5c081f) to create an admin user.

EPSS History

Score

Latest Score

-

N/A

Percentile

Latest Percentile

-

N/A

▼Common Vulnerabilities and Exposures (CVE)

Assigner:mitre

Assigner Org ID:8254265b-2729-46b6-b9e3-3dfca2d5bfca

Published At:29 Nov, 2020 | 00:47

Updated At:04 Aug, 2024 | 16:48

▼CVE Numbering Authority (CNA)

An issue was discovered on V-SOL V1600D V2.03.69 and V2.03.57, V1600D4L V1.01.49, V1600D-MINI V1.01.48, V1600G1 V2.0.7 and V1.9.7, and V1600G2 V1.1.4 OLT devices. An low-privileged (non-admin) attacker can use a hardcoded password (4ef9cea10b2362f15ba4558b1d5c081f) to create an admin user.

Affected Products

Vendor

Product

Versions

Affected

n/a

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
https://seclists.org/fulldisclosure/2020/Jul/14	x_refsource_MISC

Hyperlink: https://seclists.org/fulldisclosure/2020/Jul/14

Resource:

x_refsource_MISC

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://seclists.org/fulldisclosure/2020/Jul/14	x_refsource_MISC x_transferred

Hyperlink: https://seclists.org/fulldisclosure/2020/Jul/14

Resource:

x_refsource_MISC

x_transferred

▼National Vulnerability Database (NVD)

Source:cve@mitre.org

Published At:29 Nov, 2020 | 01:15

Updated At:03 Dec, 2020 | 19:44

An issue was discovered on V-SOL V1600D V2.03.69 and V2.03.57, V1600D4L V1.01.49, V1600D-MINI V1.01.48, V1600G1 V2.0.7 and V1.9.7, and V1600G2 V1.1.4 OLT devices. An low-privileged (non-admin) attacker can use a hardcoded password (4ef9cea10b2362f15ba4558b1d5c081f) to create an admin user.

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	8.8	HIGH	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Primary	2.0	4.0	MEDIUM	AV:N/AC:L/Au:S/C:P/I:N/A:N

Type: Primary

Version: 3.1

Base score: 8.8

Base severity: HIGH

Vector:

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Type: Primary

Version: 2.0

Base score: 4.0

Base severity: MEDIUM

Vector:

AV:N/AC:L/Au:S/C:P/I:N/A:N

CPE Matches

vsolcn>>v1600d_firmware>>2.03.57

cpe:2.3:o:vsolcn:v1600d_firmware:2.03.57:*:*:*:*:*:*:*

vsolcn>>v1600d_firmware>>2.03.69

cpe:2.3:o:vsolcn:v1600d_firmware:2.03.69:*:*:*:*:*:*:*

vsolcn>>v1600d>>-

cpe:2.3:h:vsolcn:v1600d:-:*:*:*:*:*:*:*

vsolcn>>v1600d4l_firmware>>1.01.49

cpe:2.3:o:vsolcn:v1600d4l_firmware:1.01.49:*:*:*:*:*:*:*

vsolcn>>v1600d4l>>-

cpe:2.3:h:vsolcn:v1600d4l:-:*:*:*:*:*:*:*

vsolcn>>v1600d-mini_firmware>>1.01.48

cpe:2.3:o:vsolcn:v1600d-mini_firmware:1.01.48:*:*:*:*:*:*:*

vsolcn>>v1600d-mini>>-

cpe:2.3:h:vsolcn:v1600d-mini:-:*:*:*:*:*:*:*

vsolcn>>v1600g1_firmware>>1.9.7

cpe:2.3:o:vsolcn:v1600g1_firmware:1.9.7:*:*:*:*:*:*:*

vsolcn>>v1600g1_firmware>>2.0.7

cpe:2.3:o:vsolcn:v1600g1_firmware:2.0.7:*:*:*:*:*:*:*

vsolcn>>v1600g1>>-

cpe:2.3:h:vsolcn:v1600g1:-:*:*:*:*:*:*:*

vsolcn>>v1600g2_firmware>>1.1.4

cpe:2.3:o:vsolcn:v1600g2_firmware:1.1.4:*:*:*:*:*:*:*

vsolcn>>v1600g2>>-

cpe:2.3:h:vsolcn:v1600g2:-:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-798	Primary	nvd@nist.gov

CWE ID: CWE-798

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
https://seclists.org/fulldisclosure/2020/Jul/14	cve@mitre.org	Mailing List Third Party Advisory

Hyperlink: https://seclists.org/fulldisclosure/2020/Jul/14

Source: cve@mitre.org

Resource:

Mailing List

Third Party Advisory