Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Database Security

Careers and People

Identity & Access Management

Security Monitoring

Advanced Threats

Insider Threats

Vulnerability Management

To InformationWeek

Network Computing Dark Reading

Advertise

Author

Dark Reading Staff

Profile of Dark Reading Staff

News & Commentary Posts: 2337

Dark Reading's Quick Hits delivers a brief synopsis and summary of the significance of breaking news events. For more information from the original source of the news item, please follow the link provided in this article.

Articles by Dark Reading Staff
posted in June 2015

View Content By Month

Cisco 'Everywhere': Networking Giant To Buy OpenDNS For $635 Million

6/30/2015
OpenDNS, which provides threat intelligence via a software-as-a-service offering, expected to enhance Cisco's existing cloud security offerings.
Post a Comment

FBI Investigating St. Louis Cardinals For Allegedly Hacking Houston Astros

6/16/2015
Cyber criminals, nation-states, and now professional baseball teams are apparently getting into the hacking game.
Post a Comment

Password Manager LastPass Hacked

6/16/2015
LastPass says user account email addresses, password reminders, server per user salts, and authentication hashes compromised.
Post a Comment

Breach Exposes 4 Million Federal Employees' Personal Info

6/4/2015
Attackers hit U.S. Office of Personnel Management and Department of the Interior.
Post a Comment

Report: NSA Secretly Expanded Warrantless Internet Surveillance To Find Hackers

6/4/2015
New York Times: Intelligence agency went looking not for criminal hackers on foreign and American soil.
Post a Comment

Editors' Choice

Manchester United Suffers Cyberattack

Dark Reading Staff 11/23/2020

As 'Anywhere Work' Evolves, Security Will Be Key Challenge

Robert Lemos, Contributing Writer, 11/23/2020

Cloud Security Startup Lightspin Emerges From Stealth

Kelly Sheridan, Staff Editor, Dark Reading, 11/24/2020

Get Your Pass | Interop Digital December 3rd FREE Event

Interop Digital December 3rd FREE Event on Cloud & Networking

More Informa Tech Live Events

White Papers

5 Key Steps for Assessing Your Security Effectiveness

The $500,000 Cost of Not Detecting Good vs. Bad Bot Behavior

Are Unprotected Cloud Databases Leaking Your Data?

How to Manage Third-Party Digital Risk

The Benefits of Adding Cloud Telephony to Microsoft Teams

More White Papers

Cartoon Contest

Write a Caption, Win an Amazon Gift Card! Click Here

Latest Comment: This comment is waiting for review by our moderators.

Cartoon Archive

Current Issue

2021 Top Enterprise IT Trends

We've identified the key trends that are poised to impact the IT landscape in 2021. Find out why they're important and how they will affect you today!

Download This Issue!

Back Issues | Must Reads

Flash Poll

The Malware Threat Landscape

The Malware Threat Landscape

Download this report to learn about the real makeup of online threats, as reported by the defenders who see them every day.

How Data Breaches Affect the Enterprise (2020)

How IT Security Organizations are Attacking the Cybersecurity Problem

Special Report: Understanding Your Cyber Attackers

Twitter Feed

Tweets about "from:DarkReading OR @DarkReading"

Dark Reading - Bug Report

Bug Report

Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database

CVE-2020-29378
PUBLISHED: 2020-11-29

An issue was discovered on V-SOL V1600D V2.03.69 and V2.03.57, V1600D4L V1.01.49, V1600D-MINI V1.01.48, V1600G1 V2.0.7 and V1.9.7, and V1600G2 V1.1.4 OLT devices. It is possible to elevate the privilege of a CLI user (to full administrative access) by using the password [email protected]#y$z%x6x7q8c9z) for the e...

CVE-2020-29379
PUBLISHED: 2020-11-29

An issue was discovered on V-SOL V1600D4L V1.01.49 and V1600D-MINI V1.01.48 OLT devices. During the process of updating the firmware, the update script starts a telnetd -l /bin/sh process that does not require authentication for TELNET access.

CVE-2020-29380
PUBLISHED: 2020-11-29

An issue was discovered on V-SOL V1600D V2.03.69 and V2.03.57, V1600D4L V1.01.49, V1600D-MINI V1.01.48, V1600G1 V2.0.7 and V1.9.7, and V1600G2 V1.1.4 OLT devices. TELNET is offered by default but SSH is not always available. An attacker can intercept passwords sent in cleartext and conduct a man-in-...

CVE-2020-29381
PUBLISHED: 2020-11-29

An issue was discovered on V-SOL V1600D V2.03.69 and V2.03.57, V1600D4L V1.01.49, V1600D-MINI V1.01.48, V1600G1 V2.0.7 and V1.9.7, and V1600G2 V1.1.4 OLT devices. Command injection can occur in "upload tftp syslog" and "upload tftp configuration" in the CLI via a crafted filename...

CVE-2020-29382
PUBLISHED: 2020-11-29

An issue was discovered on V-SOL V1600D V2.03.69 and V2.03.57, V1600G1 V2.0.7 and V1.9.7, and V1600G2 V1.1.4 OLT devices. A hardcoded RSA private key (specific to V1600D, V1600G1, and V1600G2) is contained in the firmware images.

To save this item to your list of favorite Dark Reading content so you can find it later in your Profile page, click the "Save It" button next to the item.

If you found this interesting or useful, please use the links to the services below to share it with other readers. You will need a free account with each service to share an item via that service.
Tweet This
[close this box]