CVE-2020-29383

Name of the Vulnerable Software and Affected Versions V-SOL V1600D4L version 1.01.49 V-SOL V1600D-MINI version 1.01.48

Description An issue was discovered on V-SOL OLT devices, where a hardcoded RSA private key is contained in the firmware images. This key is specific to the V1600D4L and V1600D-MINI devices.

Recommendations For V-SOL V1600D4L version 1.01.49, consider updating the firmware to remove the hardcoded RSA private key. For V-SOL V1600D-MINI version 1.01.48, consider updating the firmware to remove the hardcoded RSA private key. As a temporary workaround, consider restricting access to the firmware images to minimize the risk of exploitation.