PT-2020-17145

CVE-2020-29376

·

Published

2020-11-29

·

Updated

2020-12-03

Description by

CVSS 3.1
9.8
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions V-SOL V1600D versions V2.03.57 through V2.03.69 V-SOL V1600D4L version V1.01.49 V-SOL V1600D-MINI version V1.01.48 V-SOL V1600G1 versions V1.9.7 through V2.0.7 V-SOL V1600G2 version V1.1.4
Description An issue was discovered in V-SOL OLT devices, where there is a hardcoded password !j@l#y$z%x6x7q8c9z) for the admin account to authenticate to the TELNET service.
Recommendations For V-SOL V1600D versions V2.03.57 through V2.03.69, update the admin account password to a secure one. For V-SOL V1600D4L version V1.01.49, update the admin account password to a secure one. For V-SOL V1600D-MINI version V1.01.48, update the admin account password to a secure one. For V-SOL V1600G1 versions V1.9.7 through V2.0.7, update the admin account password to a secure one. For V-SOL V1600G2 version V1.1.4, update the admin account password to a secure one. As a temporary workaround, consider disabling the TELNET service until a patch is available.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾