CVE-2018-20393
Technicolor CGA0111 CGA0111E-ES-13-E23E-c8000r5712-170217-0829-TRU, CWA0101 CWA0101E-A23E-c7000r5712-170315-SKC, DPC3928SL D3928SL-PSIP-13-A010-c3420r55105-170214a, TC7110.AR STD3.38.03, TC7110.B STC8.62.02, TC7110.D STDB.79.02, TC7200.d1I TC7200.d1IE-N23E-c7000r5712-170406-HAT, and TC7200.TH2v2 SC05.00.22 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.
- Score
- CVSS 3.0 9.8 Critical
- Status
- Modified - cve@mitre.org
- Published
- 2018-12-23
- Last modified
- 2024-09-16
Affected products
- Cga0101 Firmware (Technicolor)
- Cga0111 Firmware (Technicolor)
- Dpc3928sl Firmware (Technicolor)
- Tc7110.ar Firmware (Technicolor)
- Tc7110.b Firmware (Technicolor)
- Tc7110.d Firmware (Technicolor)
- Tc7200.d1i Firmware (Technicolor)
- Tc7200.th2v2.d1i Firmware (Technicolor)
References
- https://github.com/ezelf/sensitivesOids/blob/master/oidpassswordleaks.csv
- https://misteralfa-hack.blogspot.com/2018/12/stringbleed-y-ahora-que-passwords-leaks.html