CVE-2018-20380

Ambit DDW2600 5.100.1009, DDW2602 5.105.1003, T60C926 4.64.1012, and U10C019 5.66.1026 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.

Score

CVSS 3.0 9.8 Critical

Status

Modified - cve@mitre.org

Published

2018-12-23

Last modified

2024-09-16

Affected products

• Ambit Ddw2600 Firmware (Ubeeinteractive)
• Ambit Ddw2602 Firmware (Ubeeinteractive)
• Ambit T60c926 Firmware (Ubeeinteractive)
• Ambit U10c019 Firmware (Ubeeinteractive)

References

• https://github.com/ezelf/sensitivesOids/blob/master/oidpassswordleaks.csv
• https://misteralfa-hack.blogspot.com/2018/12/stringbleed-y-ahora-que-passwords-leaks.html