CVE-2018-20393

Technicolor CGA0111 CGA0111E-ES-13-E23E-c8000r5712-170217-0829-TRU, CWA0101 CWA0101E-A23E-c7000r5712-170315-SKC, DPC3928SL D3928SL-PSIP-13-A010-c3420r55105-170214a, TC7110.AR STD3.38.03, TC7110.B STC8.62.02, TC7110.D STDB.79.02, TC7200.d1I TC7200.d1IE-N23E-c7000r5712-170406-HAT, and TC7200.TH2v2...

CVE-2018-20389

Summary: D-Link DCM-604 (DCM604 C1 ViaCabo 1.04 20130606)** and DCM-704 EU_DCM-704 1.10 are affected by a vulnerability that allows remote attackers to disclose credentials via specific SNMP requests. The issue stems from a lack of protection for service data in the devices’ web interface, enabli...

CVE-2018-20390

Kaonmedia CG2001-AN22A 1.2.1, CG2001-UDBNA 3.0.8, and CG2001-UN2NA 3.0.8 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests...

CVE-2018-20399

The CVE-2018-20399 entry concerns Motorola devices: SBG901, SBG941, and SVG1202. The affected components are SNMP services exposed by these devices, which can leak credentials via specific SNMP OIDs (iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0). This is a remote issu...

CVE-2018-20398

CVE-2018-20398 affects Skyworth CM5100 family devices (V1.1.0, V1.2.1, 4.1.0.14, V1.2.2, 4.1.0.17) where remote SNMP requests to OIDs iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 can disclose credentials. The connected Red Hat advisory and other security listings corr...

CVE-2018-20398

Skyworth CM5100 V1.1.0, CM5100-440 V1.2.1, CM5100-511 4.1.0.14, CM5100-GHD00 V1.2.2, and CM5100.g2 4.1.0.17 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests...

CVE-2018-20401

Zoom 5352 v5.5.8.6Y devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests...

CVE-2018-20395

NETWAVE MNG6200 C4835805jrc12FU121413.cpr devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests...

CVE-2018-20394

CVE-2018-20394 affects Thomson DWG849, DWG850-4, DWG855, and TWG870 devices. The issue enables remote attackers to recover credentials through SNMP requests to the OIDs iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0. The description does not specify the root cause beyon...

CVE-2018-20400

Ubee DVW2108 6.28.1017 and DVW2110 6.28.2012 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests...

CVE-2018-20380

Ambit DDW2600 5.100.1009, DDW2602 5.105.1003, T60C926 4.64.1012, and U10C019 5.66.1026 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests...

CVE-2018-20384

iNovo Broadband IB-8120-W21 139.4410mp1.004200.002 and IB-8120-W21E1 139.4410mp1.3921132mp1.899.004404.004 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests...

CVE-2018-20382

Jiuzhou BCM93383WRG 139.4410mp1.3921132mp1.899.004404.004 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests...

CVE-2018-20380

CVE-2018-20380 affects Ambit devices: DDW2600 5.100.1009, DDW2602 5.105.1003, T60C926 4.64.1012, and U10C019 5.66.1026. The vulnerability allows remote attackers to disclose credentials by issuing specific SNMP requests (iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and .2.0). Exploitation is described as r...

CVE-2018-20385

CastleNet CBV38Z4EC 125.553mp1.39219mp1.899.007, CBV38Z4ECNIT 125.553mp1.39219mp1.899.005ITT, CBW383G4J 37.556mp5.008, and CBW38G4J 37.553mp1.008 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests...

CVE-2018-20400

CVE-2018-20400 affects Ubee DVW2108 (6.28.1017) and DVW2110 (6.28.2012) devices. The issue allows remote attackers to discover credentials by sending SNMP requests to iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0. The vulnerability is triggered via SNMP and results in ...

CVE-2018-20382

CVE-2018-20382 affects Jiuzhou BCM93383WRG devices. The vulnerability arises via SNMP requests to OIDs iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0, enabling remote attackers to discover credentials. This could allow unauthorized access to the device. The provided doc...

CVE-2018-20385

The CVE-2018-20385 entry involves CastleNet CBV38Z4EC/CBV38Z4ECNIT/CBW383G4J/CBW38G4J devices where remote attackers can discover credentials by querying SNMP OIDs iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0. Impact is that credentials may be exposed remotely; no exp...

CVE-2018-20383

The CVE-2018-20383 entry affects ARRIS DG950A 7.10.145 and DG950S 7.10.145.EURO devices. The root issue is credential disclosure via SNMP, exposing credentials through SNMP OIDs iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 over the network. Reported impact is high con...

CVE-2018-20397

The CVE-2018-20397 entry relates to devices named mplus CBC383Z CBC383Z_mplus_MDr026 where remote attackers can discover credentials via SNMP requests using iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0. The connected documents confirm the vulnerability exists in these...