PT-2020-17145 · V Sol · V-Sol V1600D+4
Alexandre Torres
+3
·
Published
2020-11-29
·
Updated
2020-12-03
·
CVE-2020-29376
CVSS v3.1
9.8
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
V-SOL V1600D versions V2.03.57 through V2.03.69
V-SOL V1600D4L version V1.01.49
V-SOL V1600D-MINI version V1.01.48
V-SOL V1600G1 versions V1.9.7 through V2.0.7
V-SOL V1600G2 version V1.1.4
Description
An issue was discovered in V-SOL OLT devices, where there is a hardcoded password
!j@l#y$z%x6x7q8c9z) for the admin account to authenticate to the TELNET service.Recommendations
For V-SOL V1600D versions V2.03.57 through V2.03.69, update the admin account password to a secure one.
For V-SOL V1600D4L version V1.01.49, update the admin account password to a secure one.
For V-SOL V1600D-MINI version V1.01.48, update the admin account password to a secure one.
For V-SOL V1600G1 versions V1.9.7 through V2.0.7, update the admin account password to a secure one.
For V-SOL V1600G2 version V1.1.4, update the admin account password to a secure one.
As a temporary workaround, consider disabling the TELNET service until a patch is available.
Exploit
Fix
Using Hardcoded Credentials
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
V-Sol V1600D
V-Sol V1600D-Mini
V-Sol V1600D4L
V-Sol V1600G1
V-Sol V1600G2