PT-2019-5790
CVE-2020-29061
·
Published
2019-12-27
·
Updated
2021-03-11
Description by
CVSS 3.1
10
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
CDATA devices versions 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 97168P, FD1002S, FD1104, FD1104B, FD1104S, FD1104SN, FD1108S, FD1204S-R2, FD1204SN, FD1204SN-R2, FD1208S-R2, FD1216S-R1, FD1608GS, FD1608SN, FD1616GS, FD1616SN, FD8000
Description
The issue is related to a default root password for the root account, which could allow a remote attacker to impact the confidentiality, integrity, and availability of protected information. There is a default root126 password for the root account.
Recommendations
For all affected versions, change the default root password to a strong and unique password to prevent unauthorized access.
As a temporary workaround, consider restricting access to the root account until a patch is available.
Avoid using the default root126 password in the affected devices until the issue is resolved.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾