Approved changes feed: RSS · Atom

cpe:2.3:o:vsolcn:v1600d_firmware:2.03.69:*:*:*:*:*:*:*

part: o version: 2.03.69 update: *

VendorVsolcn (56d64c61-e339-500f-b4dc-86595cedd869)
ProductV1600D Firmware (0e989500-3e4e-56f2-ae01-0065b5b0c634)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-29382 vulnerable 2026-06-08 05:24:58.180421 Details available
An issue was discovered on V-SOL V1600D V2.03.69 and V2.03.57, V1600G1 V2.0.7 and V1.9.7, and V1600G2 V1.1.4 OLT devices. A hardcoded RSA private key (specific to V1600D, V1600G1, and V1600G2) is contained in the firmware images.
Published: 2020-11-29T00:46:06.000Z
Updated: 2024-08-04T16:55:09.829Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-29381 vulnerable 2026-06-08 05:24:58.179241 Details available
An issue was discovered on V-SOL V1600D V2.03.69 and V2.03.57, V1600D4L V1.01.49, V1600D-MINI V1.01.48, V1600G1 V2.0.7 and V1.9.7, and V1600G2 V1.1.4 OLT devices. Command injection can occur in "upload tftp syslog" and "upload tftp configuration" in the CLI via a crafted filename.
Published: 2020-11-29T00:46:24.000Z
Updated: 2024-08-04T16:55:09.254Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-29380 vulnerable 2026-06-08 05:24:58.178299 Details available
An issue was discovered on V-SOL V1600D V2.03.69 and V2.03.57, V1600D4L V1.01.49, V1600D-MINI V1.01.48, V1600G1 V2.0.7 and V1.9.7, and V1600G2 V1.1.4 OLT devices. TELNET is offered by default but SSH is not always available. An attacker can intercept passwords sent in cleartext and conduct a man-in-the-middle attack on the management of the appliance.
Published: 2020-11-29T00:46:34.000Z
Updated: 2024-08-04T16:55:10.445Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-29378 vulnerable 2026-06-08 05:24:58.176372 Details available
An issue was discovered on V-SOL V1600D V2.03.69 and V2.03.57, V1600D4L V1.01.49, V1600D-MINI V1.01.48, V1600G1 V2.0.7 and V1.9.7, and V1600G2 V1.1.4 OLT devices. It is possible to elevate the privilege of a CLI user (to full administrative access) by using the password !j@l#y$z%x6x7q8c9z) for the enable command.
Published: 2020-11-29T00:47:21.000Z
Updated: 2024-08-04T16:48:01.934Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-29377 vulnerable 2026-06-08 05:24:58.175422 Details available
An issue was discovered on V-SOL V1600D V2.03.69 OLT devices. The string K0LTdi@gnos312$ is compared to the password provided by the the remote attacker. If it matches, access is provided.
Published: 2020-11-29T00:47:30.000Z
Updated: 2024-08-04T16:48:01.684Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-29376 vulnerable 2026-06-08 05:24:58.174292 Details available
An issue was discovered on V-SOL V1600D V2.03.69 and V2.03.57, V1600D4L V1.01.49, V1600D-MINI V1.01.48, V1600G1 V2.0.7 and V1.9.7, and V1600G2 V1.1.4 OLT devices. There is an !j@l#y$z%x6x7q8c9z) password for the admin account to authenticate to the TELNET service.
Published: 2020-11-29T00:47:39.000Z
Updated: 2024-08-04T16:48:01.696Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-29375 vulnerable 2026-06-08 05:24:58.166437 Details available
An issue was discovered on V-SOL V1600D V2.03.69 and V2.03.57, V1600D4L V1.01.49, V1600D-MINI V1.01.48, V1600G1 V2.0.7 and V1.9.7, and V1600G2 V1.1.4 OLT devices. An low-privileged (non-admin) attacker can use a hardcoded password (4ef9cea10b2362f15ba4558b1d5c081f) to create an admin user.
Published: 2020-11-29T00:47:49.000Z
Updated: 2024-08-04T16:48:01.982Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.