CVSS 3.1
9.8 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2020-29056
Critical (9.8). EPSS 2.0% chance of exploitation in the next 30 days.
An issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 97168P, FD1002S, FD1104, FD1104B, FD1104S, FD1104SN, FD1108S, FD1204S-R2, FD1204SN, FD1204SN-R2, FD1208S-R2, FD1216S-R1, FD1608GS, FD1608SN, FD1616GS, FD1616SN, and FD8000 devices. One can escape from a shell and acquire root privileges by leveraging the TFTP download configuration.
Severity
- EPSS
- 2.0% chance of exploitation in the next 30 days; higher than 80% of CVEs (scores of 2026-10-31)
- CWE
- CWE-78
- Published
- Modified
- Record from
- the NVD, synced
Affected
- cdata:fd1104_firmware
- cdatatec:72408a_firmware
- cdatatec:9008a_firmware
- cdatatec:9016a_firmware
- cdatatec:92408a_firmware
- cdatatec:92416a_firmware
- cdatatec:9288_firmware
- cdatatec:97016_firmware
- cdatatec:97024p_firmware
- cdatatec:97028p_firmware
- cdatatec:97042p_firmware
- cdatatec:97084p_firmware
- cdatatec:97168p_firmware
- cdatatec:fd1002s_firmware
- cdatatec:fd1104_firmware
- cdatatec:fd1104b_firmware
- cdatatec:fd1104s_firmware
- cdatatec:fd1104sn_firmware
- cdatatec:fd1108s_firmware
- cdatatec:fd1204s-r2_firmware
- cdatatec:fd1204sn-r2_firmware
- cdatatec:fd1204sn_firmware
- cdatatec:fd1208s-r2_firmware
- cdatatec:fd1216s-r1_firmware
- cdatatec:fd1608gs_firmware
- cdatatec:fd1608sn_firmware
- cdatatec:fd1616gs_firmware
- cdatatec:fd1616sn_firmware
- cdatatec:fd8000_firmware