cdatatec records

14 published records for vendor cdatatec.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 2
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

14 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
52Plan	CVE-2022-4257No exploit	C-DATA Web Management System GET Parameter jumpto.php argument injectioncdatatec · c-data web management system · CWE-707 Pre-auth	Critical9.8	—	43.9%	Dec 1, 2022
50Plan	CVE-2022-29337Proof of concept	C-DATA FD702XW-X-R430 v2.1.13_X001 was discovered to contain a command injection vulnerability via the va_cmd parameter in formlanipv6.cdatatec · fd702xw-x-r430 firmware · CWE-78 pre-auth RCE Command injection	Critical9.8	—	35.5%	May 24, 2022
40Plan	CVE-2020-29056No exploit	An issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 97168P, FD1002S, FD1104,cdata · fd1104 firmware · CWE-78 pre-auth RCE Command injection	Critical9.8	—	2.0%	Nov 24, 2020
40Plan	CVE-2018-20512No exploit	EPON CPE-WiFi devices 2.0.4-X000 are vulnerable to escalation of privileges by sending cooLogin=1, cooUser=admin, and timestamp=-1 cookies.cdatatec · epon cpe-wifi devices firmware · CWE-565 Pre-auth	Critical9.8	—	1.8%	Jan 3, 2019
39Monitor	CVE-2020-29058No exploit	An issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 97168P, FD1002S, FD1104,cdatatec · 72408a firmware · CWE-306 Pre-auth Auth bypass	Critical9.8	—	1.5%	Nov 24, 2020
39Monitor	CVE-2020-29059No exploit	An issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 97168P, FD1002S, FD1104,cdatatec · 72408a firmware · CWE-798 Pre-auth Hard-coded credentials	Critical9.8	—	1.5%	Nov 24, 2020
39Monitor	CVE-2020-29060No exploit	An issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 97168P, FD1002S, FD1104,cdatatec · 72408a firmware · CWE-798 Pre-auth Hard-coded credentials	Critical9.8	—	1.5%	Nov 24, 2020
39Monitor	CVE-2020-29061No exploit	An issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 97168P, FD1002S, FD1104,cdatatec · 72408a firmware · CWE-798 Pre-auth Hard-coded credentials	Critical9.8	—	1.5%	Nov 24, 2020
39Monitor	CVE-2020-29062No exploit	An issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 97168P, FD1002S, FD1104,cdatatec · 72408a firmware · CWE-798 Pre-auth Hard-coded credentials	Critical9.8	—	1.5%	Nov 24, 2020
39Monitor	CVE-2020-29054No exploit	An issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 97168P, FD1002S, FD1104,cdatatec · 72408a firmware · CWE-522 Pre-auth Info leak	Critical9.8	—	1.4%	Nov 24, 2020
31Monitor	CVE-2020-29057No exploit	An issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 97168P, FD1002S, FD1104,cdatatec · 72408a firmware Pre-auth Denial of service	High7.5	—	1.9%	Nov 24, 2020
30Monitor	CVE-2023-3305No exploit	C-DATA Web Management System User Creation access controlcdatatec · web management system · CWE-284 Pre-auth Broken access control (IDOR)	High7.5	—	0.8%	Jun 18, 2023
30Monitor	CVE-2020-29063No exploit	An issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 97168P, FD1002S, FD1104,cdatatec · 72408a firmware · CWE-327 Pre-auth Weak crypto	High7.5	—	0.5%	Nov 24, 2020
23Monitor	CVE-2020-29055No exploit	An issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 97168P, FD1002S, FD1104,cdatatec · 72408a firmware · CWE-319 Pre-auth Weak crypto	Medium5.9	—	0.7%	Nov 24, 2020

CVE-2022-4257
52Plan
C-DATA Web Management System GET Parameter jumpto.php argument injection
CriticalCVSS 9.8No exploitEPSS 44%
- Pre-auth
cdatatec · c-data web management systemDec 1, 2022
CVE-2022-29337
50Plan
C-DATA FD702XW-X-R430 v2.1.13_X001 was discovered to contain a command injection vulnerability via the va_cmd parameter in formlanipv6.
CriticalCVSS 9.8Proof of conceptEPSS 35%
- pre-auth RCE
- Command injection
cdatatec · fd702xw-x-r430 firmwareMay 24, 2022
CVE-2020-29056
40Plan
An issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 97168P, FD1002S, FD1104,
CriticalCVSS 9.8No exploitEPSS 2%
- pre-auth RCE
- Command injection
cdata · fd1104 firmwareNov 24, 2020
CVE-2018-20512
40Plan
EPON CPE-WiFi devices 2.0.4-X000 are vulnerable to escalation of privileges by sending cooLogin=1, cooUser=admin, and timestamp=-1 cookies.
CriticalCVSS 9.8No exploitEPSS 2%
- Pre-auth
cdatatec · epon cpe-wifi devices firmwareJan 3, 2019
CVE-2020-29058
39Monitor
An issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 97168P, FD1002S, FD1104,
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Auth bypass
cdatatec · 72408a firmwareNov 24, 2020
CVE-2020-29059
39Monitor
An issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 97168P, FD1002S, FD1104,
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Hard-coded credentials
cdatatec · 72408a firmwareNov 24, 2020
CVE-2020-29060
39Monitor
An issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 97168P, FD1002S, FD1104,
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Hard-coded credentials
cdatatec · 72408a firmwareNov 24, 2020
CVE-2020-29061
39Monitor
An issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 97168P, FD1002S, FD1104,
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Hard-coded credentials
cdatatec · 72408a firmwareNov 24, 2020
CVE-2020-29062
39Monitor
An issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 97168P, FD1002S, FD1104,
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Hard-coded credentials
cdatatec · 72408a firmwareNov 24, 2020
CVE-2020-29054
39Monitor
An issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 97168P, FD1002S, FD1104,
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Info leak
cdatatec · 72408a firmwareNov 24, 2020
CVE-2020-29057
31Monitor
An issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 97168P, FD1002S, FD1104,
HighCVSS 7.5No exploitEPSS 2%
- Pre-auth
- Denial of service
cdatatec · 72408a firmwareNov 24, 2020
CVE-2023-3305
30Monitor
C-DATA Web Management System User Creation access control
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- Broken access control (IDOR)
cdatatec · web management systemJun 18, 2023
CVE-2020-29063
30Monitor
An issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 97168P, FD1002S, FD1104,
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- Weak crypto
cdatatec · 72408a firmwareNov 24, 2020
CVE-2020-29055
23Monitor
An issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 97168P, FD1002S, FD1104,
MediumCVSS 5.9No exploitEPSS 1%
- Pre-auth
- Weak crypto
cdatatec · 72408a firmwareNov 24, 2020