EUVD-2018-12937

Malware in sbrugna...

CVE-2018-20439

Technicolor DPC3928SL D3928SL-PSIP-13-A010-c3420r55105-170214a devices allow remote attackers to discover Wi-Fi credentials via iso.3.6.1.4.1.4413.2.2.2.1.5.4.1.14.1.3.10001 and 1.3.6.1.4.1.4413.2.2.2.1.18.1.2.3.4.1.2.10001 SNMP requests...

Unspecified Vulnerability in Technicolor DPC3928SL

The Technicolor DPC3928SL is a cable modem from the French Technicolor group. A security vulnerability exists in the Technicolor DPC3928SL D3928SL-PSIP-13-A010-c3420r55105-170214a version. An attacker could exploit the vulnerability to obtain Wi-Fi credentials by sending an SNMP request...

Code injection

Technicolor DPC3928SL D3928SL-PSIP-13-A010-c3420r55105-170214a devices allow remote attackers to discover Wi-Fi credentials via iso.3.6.1.4.1.4413.2.2.2.1.5.4.1.14.1.3.10001 and 1.3.6.1.4.1.4413.2.2.2.1.18.1.2.3.4.1.2.10001 SNMP requests...

CVE-2018-20439

Technicolor DPC3928SL D3928SL-PSIP-13-A010-c3420r55105-170214a devices allow remote attackers to discover Wi-Fi credentials via iso.3.6.1.4.1.4413.2.2.2.1.5.4.1.14.1.3.10001 and 1.3.6.1.4.1.4413.2.2.2.1.18.1.2.3.4.1.2.10001 SNMP requests...

CVE-2018-20439

The CVE concerns Technicolor DPC3928SL devices (D3928SL-PSIP-13-A010-c3420r55105-170214a). Affected component is SNMP handling, where remote attackers can obtain Wi‑Fi credentials by sending specific SNMP requests (SNMP OIDs iso.3.6.1.4.1.4413.2.2.2.1.5.4.1.14.1.3.10001 and 1.3.6.1.4.1.4413.2.2.2...

CVE-2018-20439

Technicolor DPC3928SL D3928SL-PSIP-13-A010-c3420r55105-170214a devices allow remote attackers to discover Wi-Fi credentials via iso.3.6.1.4.1.4413.2.2.2.1.5.4.1.14.1.3.10001 and 1.3.6.1.4.1.4413.2.2.2.1.18.1.2.3.4.1.2.10001 SNMP requests...

Technicolor DPC3928SL Cross Site Scripting Vulnerability

The Technicolor DPC3928SL is a cable modem from the French Technicolor group. A cross-site scripting vulnerability exists in the Technicolor DPC3928SL D3928SL-PSIP-13-A010-c3420r55105-160428a version. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML with the...

CVE-2018-20393

Technicolor CGA0111 CGA0111E-ES-13-E23E-c8000r5712-170217-0829-TRU, CWA0101 CWA0101E-A23E-c7000r5712-170315-SKC, DPC3928SL D3928SL-PSIP-13-A010-c3420r55105-170214a, TC7110.AR STD3.38.03, TC7110.B STC8.62.02, TC7110.D STDB.79.02, TC7200.d1I TC7200.d1IE-N23E-c7000r5712-170406-HAT, and TC7200.TH2v2...

CVE-2018-20379

Technicolor DPC3928SL D3928SL-PSIP-13-A010-c3420r55105-160428a devices allow XSS via a Cross Protocol Injection attack with setSSID of 1.3.6.1.4.1.4413.2.2.2.1.18.1.2.1.1.3.10001...

CVE-2018-20379

Technicolor DPC3928SL D3928SL-PSIP-13-A010-c3420r55105-160428a devices allow XSS via a Cross Protocol Injection attack with setSSID of 1.3.6.1.4.1.4413.2.2.2.1.18.1.2.1.1.3.10001...

Cross site scripting

Technicolor DPC3928SL D3928SL-PSIP-13-A010-c3420r55105-160428a devices allow XSS via a Cross Protocol Injection attack with setSSID of 1.3.6.1.4.1.4413.2.2.2.1.18.1.2.1.1.3.10001...

CVE-2018-20379

CVE-2018-20379 affects Technicolor DPC3928SL devices (model D3928SL-PSIP-13-A010-c3420r55105-160428a). The vulnerability is a cross-site scripting (XSS) flaw exposed through a cross protocol injection path involving the setSSID field identified by the OID 1.3.6.1.4.1.4413.2.2.2.1.18.1.2.1.1.3.100...

CVE-2018-20393

The CVE-2018-20393 entry applies to Technicolor devices (e.g., CGA0111 variants, CWA0101, DPC3928SL, TC7110, TC7200) and describes a credential-disclosure flaw exploitable via SNMP. Remote attackers can retrieve credentials by querying specific SNMP OIDs (iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and .....

CVE-2018-20379

Technicolor DPC3928SL D3928SL-PSIP-13-A010-c3420r55105-160428a devices allow XSS via a Cross Protocol Injection attack with setSSID of 1.3.6.1.4.1.4413.2.2.2.1.18.1.2.1.1.3.10001...

CVE-2017-5135

Certain Technicolor devices have an SNMP access-control bypass, possibly involving an ISP customization in some cases. The Technicolor formerly Cisco DPC3928SL with firmware D3928SL-P15-13-A386-c3420r55105-160127a could be reached by any SNMP community string from the Internet; also, you can writ...

CVE-2017-5135

CVE-2017-5135 describes an SNMP access-control bypass on certain Technicolor (former Cisco) devices, notably the DPC3928SL. The vulnerability allows authentication with any SNMP community string, potentially granting full remote read/write access via MIB write capabilities (Stringbleed). Concrete...

SNMP Incorrect Access Control Vulnerability (CVE 2017-5135) (StringBleed)

In DEFCON 24 IoT Village i gave a talk about the danger of SNMP write properties enabled devices in the IoT, police patrols, ambulances and other in the “critical mission vehicles” were affected in that research. In December 2016 with a colleague from Argentina Ezequiel Fernandez we decided to...