critical9.8
CVE-2018-20393
Technicolor CGA0111 CGA0111E-ES-13-E23E-c8000r5712-170217-0829-TRU, CWA0101 CWA0101E-A23E-c7000r5712-170315-SKC, DPC3928SL D3928SL-PSIP-13-A010-c3420r55105-170…
Impact
Technicolor CGA0111 CGA0111E-ES-13-E23E-c8000r5712-170217-0829-TRU, CWA0101 CWA0101E-A23E-c7000r5712-170315-SKC, DPC3928SL D3928SL-PSIP-13-A010-c3420r55105-170214a, TC7110.AR STD3.38.03, TC7110.B STC8.62.02, TC7110.D STDB.79.02, TC7200.d1I TC7200.d1IE-N23E-c7000r5712-170406-HAT, and TC7200.TH2v2 SC05.00.22 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Technicolor | Cga0111 Firmware | Version cga0111e-es-13-e23e-c8000r5712-170217-0829-tru |
| Technicolor | Cga0101 Firmware | Version cwa0101e-a23e-c7000r5712-170315-skc |
| Technicolor | Dpc3928sl Firmware | Version d3928sl-psip-13-a010-c3420r55105-170214a |
| Technicolor | Tc7110.Ar Firmware | Version std3.38.03 |
| Technicolor | Tc7110.B Firmware | Version stc8.62.02 |
| Technicolor | Tc7110.D Firmware | Version stdb.79.02 |
| Technicolor | Tc7200.D1i Firmware | Version tc7200.d1ie-n23e-c7000r5712-170406-hat |
| Technicolor | Tc7200.Th2v2.D1i Firmware | Version sc05.00.22 |
References
- NVD record
- CVE.org record
- https://github.com/ezelf/sensitivesOids/blob/master/oidpassswordleaks.csv
- https://misteralfa-hack.blogspot.com/2018/12/stringbleed-y-ahora-que-passwords-leaks.html
- https://github.com/ezelf/sensitivesOids/blob/master/oidpassswordleaks.csv
- https://misteralfa-hack.blogspot.com/2018/12/stringbleed-y-ahora-que-passwords-leaks.html