CVSS 3.1
7.5 highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NCVE-2020-29063
High (7.5) in cdatatec. EPSS 0.5% chance of exploitation in the next 30 days.
An issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 97168P, FD1002S, FD1104, FD1104B, FD1104S, FD1104SN, FD1108S, FD1204S-R2, FD1204SN, FD1204SN-R2, FD1208S-R2, FD1216S-R1, FD1608GS, FD1608SN, FD1616GS, FD1616SN, and FD8000 devices. A custom encryption algorithm is used to store encrypted passwords. This algorithm will XOR the password with the hardcoded *j7a(L#yZ98sSd5HfSgGjMj8;Ss;d)(*&^#@$a2s0i3g value.
Severity
- EPSS
- 0.5% chance of exploitation in the next 30 days; higher than 45% of CVEs (scores of 2026-10-31)
- CWE
- CWE-327
- Published
- Modified
- Record from
- the NVD, synced
Affected
- cdatatec:72408a_firmware
- cdatatec:9008a_firmware
- cdatatec:9016a_firmware
- cdatatec:92408a_firmware
- cdatatec:92416a_firmware
- cdatatec:9288_firmware
- cdatatec:97016_firmware
- cdatatec:97024p_firmware
- cdatatec:97028p_firmware
- cdatatec:97042p_firmware
- cdatatec:97084p_firmware
- cdatatec:97168p_firmware
- cdatatec:fd1002s_firmware
- cdatatec:fd1104_firmware
- cdatatec:fd1104b_firmware
- cdatatec:fd1104s_firmware
- cdatatec:fd1104sn_firmware
- cdatatec:fd1108s_firmware
- cdatatec:fd1204s-r2_firmware
- cdatatec:fd1204sn-r2_firmware
- cdatatec:fd1204sn_firmware
- cdatatec:fd1208s-r2_firmware
- cdatatec:fd1216s-r1_firmware
- cdatatec:fd1608gs_firmware
- cdatatec:fd1608sn_firmware
- cdatatec:fd1616gs_firmware
- cdatatec:fd1616sn_firmware
- cdatatec:fd8000_firmware