VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Nov 29, 2020· Updated Jun 17, 2026

CVE-2020-29381

CVE-2020-29381

Description

An issue was discovered on V-SOL V1600D V2.03.69 and V2.03.57, V1600D4L V1.01.49, V1600D-MINI V1.01.48, V1600G1 V2.0.7 and V1.9.7, and V1600G2 V1.1.4 OLT devices. Command injection can occur in "upload tftp syslog" and "upload tftp configuration" in the CLI via a crafted filename.

Affected products

10
  • V-SOL/V1600G1llm-fuzzy
    Range: 2.0.7, 1.9.7
  • V-SOL/V1600Dllm-fuzzy
    Range: 2.03.69, 2.03.57
  • V-SOL/V1600D V2.03.69 and V2.03.57, V1600D4L V1.01.49, V1600D-MINI V1.01.48, V1600G1 V2.0.7 and V1.9.7, and V1600G2 V1.1.4 OLTdescription
  • Vsolcn/V1600d Firmware2 versions
    cpe:2.3:o:vsolcn:v1600d_firmware:2.03.57:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:vsolcn:v1600d_firmware:2.03.57:*:*:*:*:*:*:*
    • cpe:2.3:o:vsolcn:v1600d_firmware:2.03.69:*:*:*:*:*:*:*
  • Vsolcn/V1600d4l Firmware
    cpe:2.3:o:vsolcn:v1600d4l_firmware:1.01.49:*:*:*:*:*:*:*
  • Vsolcn/V1600d Mini Firmware
    cpe:2.3:o:vsolcn:v1600d-mini_firmware:1.01.48:*:*:*:*:*:*:*
  • Vsolcn/V1600g1 Firmware2 versions
    cpe:2.3:o:vsolcn:v1600g1_firmware:1.9.7:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:vsolcn:v1600g1_firmware:1.9.7:*:*:*:*:*:*:*
    • cpe:2.3:o:vsolcn:v1600g1_firmware:2.0.7:*:*:*:*:*:*:*
  • Vsolcn/V1600g2 Firmware
    cpe:2.3:o:vsolcn:v1600g2_firmware:1.1.4:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.