CVSS 3.1
9.8 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2020-29054
Critical (9.8) in cdatatec. EPSS 1.4% chance of exploitation in the next 30 days.
An issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 97168P, FD1002S, FD1104, FD1104B, FD1104S, FD1104SN, FD1108S, FD1204S-R2, FD1204SN, FD1204SN-R2, FD1208S-R2, FD1216S-R1, FD1608GS, FD1608SN, FD1616GS, FD1616SN, and FD8000 devices. Attackers can use "show system infor" to discover cleartext TELNET credentials.
Severity
- EPSS
- 1.4% chance of exploitation in the next 30 days; higher than 71% of CVEs (scores of 2026-10-31)
- CWE
- CWE-522
- Published
- Modified
- Record from
- the NVD, synced
Affected
- cdatatec:72408a_firmware
- cdatatec:9008a_firmware
- cdatatec:9016a_firmware
- cdatatec:92408a_firmware
- cdatatec:92416a_firmware
- cdatatec:9288_firmware
- cdatatec:97016_firmware
- cdatatec:97024p_firmware
- cdatatec:97028p_firmware
- cdatatec:97042p_firmware
- cdatatec:97084p_firmware
- cdatatec:97168p_firmware
- cdatatec:fd1002s_firmware
- cdatatec:fd1104_firmware
- cdatatec:fd1104b_firmware
- cdatatec:fd1104s_firmware
- cdatatec:fd1104sn_firmware
- cdatatec:fd1108s_firmware
- cdatatec:fd1204s-r2_firmware
- cdatatec:fd1204sn-r2_firmware
- cdatatec:fd1204sn_firmware
- cdatatec:fd1208s-r2_firmware
- cdatatec:fd1216s-r1_firmware
- cdatatec:fd1608gs_firmware
- cdatatec:fd1608sn_firmware
- cdatatec:fd1616gs_firmware
- cdatatec:fd1616sn_firmware
- cdatatec:fd8000_firmware