CVE-2020-29381

—

CVSS 3.1

9.8 critical

EPSS

2%p83

Published

Nov 29, 2020 (Nov 29, 2020)

Modified

Jun 17, 2026

Description

An issue was discovered on V-SOL V1600D V2.03.69 and V2.03.57, V1600D4L V1.01.49, V1600D-MINI V1.01.48, V1600G1 V2.0.7 and V1.9.7, and V1600G2 V1.1.4 OLT devices. Command injection can occur in "upload tftp syslog" and "upload tftp configuration" in the CLI via a crafted filename.

Vendors: vsolcn
Products: v1600d firmware, v1600d4l firmware, v1600d-mini firmware, v1600g1 firmware, v1600g2 firmware
Weakness: CWE-78
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (2.4%)

In the news0 stories

No ingested article mentions this CVE yet.