CVE-2020-29055: Cdatatec 72408a Firmware

Medium severity, CVSS 5.9. EPSS: 0.7% chance of exploitation in the next 30 days.

An issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 97168P, FD1002S, FD1104, FD1104B, FD1104S, FD1104SN, FD1108S, FD1204S-R2, FD1204SN, FD1204SN-R2, FD1208S-R2, FD1216S-R1, FD1608GS, FD1608SN, FD1616GS, FD1616SN, and FD8000 devices. By default, the appliance can be managed remotely only with HTTP, telnet, and SNMP. It doesn't support SSL/TLS for HTTP or SSH. An attacker can intercept passwords sent in cleartext and conduct man-in-the-middle attacks on the management of the appliance.

Affected products

  • Cdatatec 72408a Firmware: version 1.2.2 only; version 2.4.03_000 only; version 2.4.04_001 only; version 2.4.05_000 only
  • Cdatatec 9008a Firmware: version 1.2.2 only; version 2.4.03_000 only; version 2.4.04_001 only; version 2.4.05_000 only
  • Cdatatec 9016a Firmware: version 1.2.2 only; version 2.4.03_000 only; version 2.4.04_001 only; version 2.4.05_000 only
  • Cdatatec 92408a Firmware: version 1.2.2 only; version 2.4.03_000 only; version 2.4.04_001 only; version 2.4.05_000 only
  • Cdatatec 92416a Firmware: version 1.2.2 only; version 2.4.03_000 only; version 2.4.04_001 only; version 2.4.05_000 only
  • Cdatatec 9288 Firmware: version 1.2.2 only; version 2.4.03_000 only; version 2.4.04_001 only; version 2.4.05_000 only
  • Cdatatec 97016 Firmware: version 1.2.2 only; version 2.4.03_000 only; version 2.4.04_001 only; version 2.4.05_000 only
  • Cdatatec 97024p Firmware: version 1.2.2 only; version 2.4.03_000 only; version 2.4.04_001 only; version 2.4.05_000 only
  • Cdatatec 97028p Firmware: version 1.2.2 only; version 2.4.03_000 only; version 2.4.04_001 only; version 2.4.05_000 only
  • Cdatatec 97042p Firmware: version 1.2.2 only; version 2.4.03_000 only; version 2.4.04_001 only; version 2.4.05_000 only
  • Cdatatec 97084p Firmware: version 1.2.2 only; version 2.4.03_000 only; version 2.4.04_001 only; version 2.4.05_000 only
  • Cdatatec 97168p Firmware: version 1.2.2 only; version 2.4.03_000 only; version 2.4.04_001 only; version 2.4.05_000 only
  • Cdatatec FD1002S Firmware: version 1.2.2 only; version 2.4.03_000 only; version 2.4.04_001 only; version 2.4.05_000 only
  • Cdatatec FD1104 Firmware: version 1.2.2 only; version 2.4.03_000 only; version 2.4.04_001 only; version 2.4.05_000 only
  • Cdatatec FD1104B Firmware: version 1.2.2 only; version 2.4.03_000 only; version 2.4.04_001 only; version 2.4.05_000 only
  • Cdatatec FD1104S Firmware: version 1.2.2 only; version 2.4.03_000 only; version 2.4.04_001 only; version 2.4.05_000 only
  • Cdatatec FD1104SN Firmware: version 1.2.2 only; version 2.4.03_000 only; version 2.4.04_001 only; version 2.4.05_000 only
  • Cdatatec FD1108S Firmware: version 1.2.2 only; version 2.4.03_000 only; version 2.4.04_001 only; version 2.4.05_000 only
  • Cdatatec FD1204S-r2 Firmware: version 1.2.2 only; version 2.4.03_000 only; version 2.4.04_001 only; version 2.4.05_000 only
  • Cdatatec FD1204SN-r2 Firmware: version 1.2.2 only; version 2.4.03_000 only; version 2.4.04_001 only; version 2.4.05_000 only
  • Cdatatec FD1204SN Firmware: version 1.2.2 only; version 2.4.03_000 only; version 2.4.04_001 only; version 2.4.05_000 only
  • Cdatatec FD1208S-r2 Firmware: version 1.2.2 only; version 2.4.03_000 only; version 2.4.04_001 only; version 2.4.05_000 only
  • Cdatatec FD1216S-r1 Firmware: version 1.2.2 only; version 2.4.03_000 only; version 2.4.04_001 only; version 2.4.05_000 only
  • Cdatatec FD1608GS Firmware: version 1.2.2 only; version 2.4.03_000 only; version 2.4.04_001 only; version 2.4.05_000 only
  • Cdatatec FD1608SN Firmware: version 1.2.2 only; version 2.4.03_000 only; version 2.4.04_001 only; version 2.4.05_000 only
  • and 3 more

Published 2020-11-24. Last modified 2026-06-17.