CVE-2018-20383 - ARRIS DG950A 7.10.145 and DG950S 7.10.145.EURO devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests

Back Back to CVE browser

CRITICAL

ARRIS DG950A 7.10.145 and DG950S 7.10.145.EURO devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests

Published Dec 23, 2018

9.8

CRITICAL

CVSS 3.1

EPSS 1.82%

Description

ARRIS DG950A 7.10.145 and DG950S 7.10.145.EURO devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-522

Insufficiently Protected Credentials

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-12941
Advisory
https://github.com/ezelf/sensitivesOids/blob/master/oidpassswordleaks.csv
x_refsource_MISCThird Party Advisory
https://misteralfa-hack.blogspot.com/2018/12/stringbleed-y-ahora-que-passwords-leaks.html
x_refsource_MISCExploitThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-12941		Advisory
https://github.com/ezelf/sensitivesOids/blob/master/oidpassswordleaks.csv		x_refsource_MISCThird Party Advisory
https://misteralfa-hack.blogspot.com/2018/12/stringbleed-y-ahora-que-passwords-leaks.html		x_refsource_MISCExploitThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Dec 23, 2018

Updated Sep 16, 2024

Reserved Dec 23, 2018

Link CVE-2018-20383

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2018-20383

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Dec 23, 2018

Updated Sep 16, 2024

Link EUVD-2018-12941

GitHub

No data