CVE-2018-20393
Last modified
CVE-2018-20393 is a vulnerability of currently unknown severity. Technicolor CGA0111 CGA0111E-ES-13-E23E-c8000r5712-170217-0829-TRU, CWA0101 CWA0101E-A23E-c7000r5712-170315-SKC, DPC3928SL D3928SL-PSIP-13-A010-c3420r55105-170214a, TC7110.AR STD3.38.03, TC7110.B STC8.62.02, TC7110.D STDB.79.02, TC7200.d1I TC7200.d1IE-N23E-c7000r5712-170406-HAT, and TC7200.TH2v2 SC05.00.22 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.. EPSS estimates a 1.60% chance of exploitation in the next 30 days.
Description
Technicolor CGA0111 CGA0111E-ES-13-E23E-c8000r5712-170217-0829-TRU, CWA0101 CWA0101E-A23E-c7000r5712-170315-SKC, DPC3928SL D3928SL-PSIP-13-A010-c3420r55105-170214a, TC7110.AR STD3.38.03, TC7110.B STC8.62.02, TC7110.D STDB.79.02, TC7200.d1I TC7200.d1IE-N23E-c7000r5712-170406-HAT, and TC7200.TH2v2 SC05.00.22 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Technicolor | Cga0111 Firmware | cga0111e-es-13-e23e-c8000r5712-170217-0829-tru |
| Technicolor | Cga0101 Firmware | cwa0101e-a23e-c7000r5712-170315-skc |
| Technicolor | Dpc3928sl Firmware | d3928sl-psip-13-a010-c3420r55105-170214a |
| Technicolor | Tc7110.Ar Firmware | std3.38.03 |
| Technicolor | Tc7110.B Firmware | stc8.62.02 |
| Technicolor | Tc7110.D Firmware | stdb.79.02 |
| Technicolor | Tc7200.D1i Firmware | tc7200.d1ie-n23e-c7000r5712-170406-hat |
| Technicolor | Tc7200.Th2v2.D1i Firmware | sc05.00.22 |
References
- https://github.com/ezelf/sensitivesOids/blob/master/oidpassswordleaks.csvThird Party Advisory
- https://misteralfa-hack.blogspot.com/2018/12/stringbleed-y-ahora-que-passwords-leaks.htmlExploit, Third Party Advisory
- https://github.com/ezelf/sensitivesOids/blob/master/oidpassswordleaks.csvThird Party Advisory
- https://misteralfa-hack.blogspot.com/2018/12/stringbleed-y-ahora-que-passwords-leaks.htmlExploit, Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2018-20393?
How severe is CVE-2018-20393?
How do I fix CVE-2018-20393?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2018
- CVE-2018-20388Comtrend CM-6200un 123.447.007 and CM-6300n 123.553mp1.005 d…
- CVE-2018-20389D-Link DCM-604 DCM604_C1_ViaCabo_1.04_20130606 and DCM-704 E…
- CVE-2018-2039Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
- CVE-2018-20390Kaonmedia CG2001-AN22A 1.2.1, CG2001-UDBNA 3.0.8, and CG2001…
- CVE-2018-20391TEKNOTEL CBW700N 81.447.392110.729.024 devices allow remote …
- CVE-2018-20392S-A WebSTAR DPC2100 v2.0.2r1256-060303 devices allow remote …
- CVE-2018-20394Thomson DWG849 STC0.01.16, DWG850-4 ST9C.05.25, DWG855 ST80.…
- CVE-2018-20395NETWAVE MNG6200 C4835805jrc12FU121413.cpr devices allow remo…
- CVE-2018-20396NET&SYS MNG2120J 5.76.1006c and MNG6300 5.83.6305jrc2 device…9.8
- CVE-2018-20397mplus CBC383Z CBC383Z_mplus_MDr026 devices allow remote atta…
- CVE-2018-20398Skyworth CM5100 V1.1.0, CM5100-440 V1.2.1, CM5100-511 4.1.0.…
- CVE-2018-20399Motorola SBG901 SBG901-2.10.1.1-GA-00-581-NOSH, SBG941 SBG94…
Are you affected by CVE-2018-20393?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST