CVSS 3.1
5.9 mediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:NCVE-2020-29055
Medium (5.9) in cdatatec. EPSS 0.7% chance of exploitation in the next 30 days.
An issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 97168P, FD1002S, FD1104, FD1104B, FD1104S, FD1104SN, FD1108S, FD1204S-R2, FD1204SN, FD1204SN-R2, FD1208S-R2, FD1216S-R1, FD1608GS, FD1608SN, FD1616GS, FD1616SN, and FD8000 devices. By default, the appliance can be managed remotely only with HTTP, telnet, and SNMP. It doesn't support SSL/TLS for HTTP or SSH. An attacker can intercept passwords sent in cleartext and conduct man-in-the-middle attacks on the management of the appliance.
Severity
- EPSS
- 0.7% chance of exploitation in the next 30 days; higher than 51% of CVEs (scores of 2026-10-31)
- CWE
- CWE-319
- Published
- Modified
- Record from
- the NVD, synced
Affected
- cdatatec:72408a_firmware
- cdatatec:9008a_firmware
- cdatatec:9016a_firmware
- cdatatec:92408a_firmware
- cdatatec:92416a_firmware
- cdatatec:9288_firmware
- cdatatec:97016_firmware
- cdatatec:97024p_firmware
- cdatatec:97028p_firmware
- cdatatec:97042p_firmware
- cdatatec:97084p_firmware
- cdatatec:97168p_firmware
- cdatatec:fd1002s_firmware
- cdatatec:fd1104_firmware
- cdatatec:fd1104b_firmware
- cdatatec:fd1104s_firmware
- cdatatec:fd1104sn_firmware
- cdatatec:fd1108s_firmware
- cdatatec:fd1204s-r2_firmware
- cdatatec:fd1204sn-r2_firmware
- cdatatec:fd1204sn_firmware
- cdatatec:fd1208s-r2_firmware
- cdatatec:fd1216s-r1_firmware
- cdatatec:fd1608gs_firmware
- cdatatec:fd1608sn_firmware
- cdatatec:fd1616gs_firmware
- cdatatec:fd1616sn_firmware
- cdatatec:fd8000_firmware