PT-2020-17152

CVE-2020-29383

·

Published

2020-11-29

·

Updated

2020-12-01

Description by

CVSS 3.1
7.8
High
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions V-SOL V1600D4L version 1.01.49 V-SOL V1600D-MINI version 1.01.48
Description An issue was discovered on V-SOL OLT devices, where a hardcoded RSA private key is contained in the firmware images. This key is specific to the V1600D4L and V1600D-MINI devices.
Recommendations For V-SOL V1600D4L version 1.01.49, consider updating the firmware to remove the hardcoded RSA private key. For V-SOL V1600D-MINI version 1.01.48, consider updating the firmware to remove the hardcoded RSA private key. As a temporary workaround, consider restricting access to the firmware images to minimize the risk of exploitation.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾