CVE-2018-20396

NET&SYS MNG2120J 5.76.1006c and MNG6300 5.83.6305jrc2 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests...

CVE-2018-20383

The CVE-2018-20383 entry affects ARRIS DG950A 7.10.145 and DG950S 7.10.145.EURO devices. The root issue is credential disclosure via SNMP, exposing credentials through SNMP OIDs iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 over the network. Reported impact is high con...

CVE-2018-20383

ARRIS DG950A 7.10.145 and DG950S 7.10.145.EURO devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests...

CVE-2018-20385

The CVE-2018-20385 entry involves CastleNet CBV38Z4EC/CBV38Z4ECNIT/CBW383G4J/CBW38G4J devices where remote attackers can discover credentials by querying SNMP OIDs iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0. Impact is that credentials may be exposed remotely; no exp...

CVE-2018-20382

CVE-2018-20382 affects Jiuzhou BCM93383WRG devices. The vulnerability arises via SNMP requests to OIDs iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0, enabling remote attackers to discover credentials. This could allow unauthorized access to the device. The provided doc...

CVE-2018-20387

Bnmux BCW700J 5.20.7, BCW710J 5.30.6a, and BCW710J2 5.30.16 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests...

CVE-2018-20400

Ubee DVW2108 6.28.1017 and DVW2110 6.28.2012 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests...

CVE-2018-20401

The CVE-2018-20401 entry applies to Zoom 5352 devices running version 5.5.8.6Y, where an information-disclosure flaw allows remote attackers to obtain credentials by querying SNMP using two OIDs (iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0). The underlying issue is a...

CVE-2018-20397

The CVE-2018-20397 entry relates to devices named mplus CBC383Z CBC383Z_mplus_MDr026 where remote attackers can discover credentials via SNMP requests using iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0. The connected documents confirm the vulnerability exists in these...

CVE-2018-20399

The CVE-2018-20399 entry concerns Motorola devices: SBG901, SBG941, and SVG1202. The affected components are SNMP services exposed by these devices, which can leak credentials via specific SNMP OIDs (iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0). This is a remote issu...

CVE-2018-20387

CVE-2018-20387 affects Bnmux BCW700J (5.20.7), BCW710J (5.30.6a), and BCW710J2 (5.30.16). The connected sources describe a design/logic flaw that allows remote attackers to discover credentials via SNMP requests to OIDs iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0. Th...

CVE-2018-20388

The CVE-2018-20388 entry concerns Comtrend devices: CM-6200un (example version 123.447.007) and CM-6300n (example version 123.553mp1.005). The vulnerability arises from SNMP requests to OIDs iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0, which can allow remote attacker...

CVE-2018-20388

Comtrend CM-6200un 123.447.007 and CM-6300n 123.553mp1.005 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests...

CVE-2018-20389

Summary: D-Link DCM-604 (DCM604 C1 ViaCabo 1.04 20130606)** and DCM-704 EU_DCM-704 1.10 are affected by a vulnerability that allows remote attackers to disclose credentials via specific SNMP requests. The issue stems from a lack of protection for service data in the devices’ web interface, enabli...

CVE-2018-20384

iNovo Broadband IB-8120-W21 139.4410mp1.004200.002 and IB-8120-W21E1 139.4410mp1.3921132mp1.899.004404.004 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests...

CVE-2018-20390

The CVE-2018-20390 entry concerns Kaonmedia CG2001-series devices (CG2001-AN22A 1.2.1, CG2001-UDBNA 3.0.8, CG2001-UN2NA 3.0.8) that permit credential disclosure through SNMP requests. The vulnerability is triggered by specific SNMP OIDs in iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491...

CVE-2018-20392

The CVE-2018-20392 entry concerns S-A WebSTAR DPC2100 devices running v2.0.2r1256-060303. The vulnerability allows remote attackers to disclose credentials through SNMP requests targeting iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0. Connected sources confirm the affe...

CVE-2018-20380

Ambit DDW2600 5.100.1009, DDW2602 5.105.1003, T60C926 4.64.1012, and U10C019 5.66.1026 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests...

CVE-2018-20380

CVE-2018-20380 affects Ambit devices: DDW2600 5.100.1009, DDW2602 5.105.1003, T60C926 4.64.1012, and U10C019 5.66.1026. The vulnerability allows remote attackers to disclose credentials by issuing specific SNMP requests (iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and .2.0). Exploitation is described as r...

CVE-2018-20400

CVE-2018-20400 affects Ubee DVW2108 (6.28.1017) and DVW2110 (6.28.2012) devices. The issue allows remote attackers to discover credentials by sending SNMP requests to iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0. The vulnerability is triggered via SNMP and results in ...