CVE-2020-29382

Name of the Vulnerable Software and Affected Versions V-SOL V1600D versions V2.03.57 through V2.03.69 V-SOL V1600G1 versions V1.9.7 through V2.0.7 V-SOL V1600G2 version V1.1.4

Description An issue was discovered in V-SOL OLT devices where a hardcoded RSA private key is contained in the firmware images. This key is specific to V1600D, V1600G1, and V1600G2 devices.

Recommendations For V-SOL V1600D versions V2.03.57 through V2.03.69, consider updating the firmware to remove the hardcoded RSA private key. For V-SOL V1600G1 versions V1.9.7 through V2.0.7, consider updating the firmware to remove the hardcoded RSA private key. For V-SOL V1600G2 version V1.1.4, consider updating the firmware to remove the hardcoded RSA private key. As a temporary workaround, consider restricting access to the firmware images to minimize the risk of exploitation.