CVE-2020-29379

Name of the Vulnerable Software and Affected Versions V-SOL V1600D4L version 1.01.49 V-SOL V1600D-MINI version 1.01.48

Description An issue was discovered on V-SOL OLT devices. During the process of updating the firmware, the update script starts a telnetd -l /bin/sh process that does not require authentication for TELNET access.

Recommendations For V-SOL V1600D4L version 1.01.49, consider disabling the telnetd process until a patch is available. For V-SOL V1600D-MINI version 1.01.48, restrict access to the update script to minimize the risk of exploitation.