CVE-2018-20396

CVE-2018-20396 affects NET&SYS MNG2120J (5.76.1006c) and MNG6300 (5.83.6305jrc2). The issue allows remote attackers to discover credentials via SNMP requests to the OIDs iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0. The Red Hat and PRION records corroborate the same i...

CVE-2018-20392

The CVE-2018-20392 entry concerns S-A WebSTAR DPC2100 devices running v2.0.2r1256-060303. The vulnerability allows remote attackers to disclose credentials through SNMP requests targeting iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0. Connected sources confirm the affe...

CVE-2018-20384

Summary: CVE-2018-20384 affects iNovo Broadband IB-8120-W21 and IB-8120-W21E1 devices. The issue enables remote attackers to discover credentials through SNMP requests to specific OIDs (iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and ...1.2.0). The connected sources list the affected models and the creden...

CVE-2018-20395

CVE-2018-20395 affects NETWAVE MNG6200 devices. The issue arises from SNMP requests to OIDs iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0, which allow remote attackers to discover credentials. The affected component is SNMP handling; root cause is exposure of credentia...

CVE-2018-20388

The CVE-2018-20388 entry concerns Comtrend devices: CM-6200un (example version 123.447.007) and CM-6300n (example version 123.553mp1.005). The vulnerability arises from SNMP requests to OIDs iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0, which can allow remote attacker...

CVE-2018-20381

The CVE-2018-20381 entry affects Technicolor DPC2320 / dpc2300r2-v202r1244101-150420a-v6 devices. The exposed issue is an SNMP-authenticated credential disclosure: remote attackers can retrieve credentials via SNMP requests to two specific OIDs (iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and ...1.2.0). T...

CVE-2018-20401

The CVE-2018-20401 entry applies to Zoom 5352 devices running version 5.5.8.6Y, where an information-disclosure flaw allows remote attackers to obtain credentials by querying SNMP using two OIDs (iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0). The underlying issue is a...

CVE-2018-20386

The CVE-2018-20386 entry concerns ARRIS SBG6580-2 devices (D30GW-SEAEAGLE-1.5.2.5-GA-00-NOSH). The vulnerability arises from SNMP exposure that allows remote attackers to discover credentials via two SNMP OIDs (iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0). The connec...

CVE-2018-20383

ARRIS DG950A 7.10.145 and DG950S 7.10.145.EURO devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests...

CVE-2018-20387

CVE-2018-20387 affects Bnmux BCW700J (5.20.7), BCW710J (5.30.6a), and BCW710J2 (5.30.16). The connected sources describe a design/logic flaw that allows remote attackers to discover credentials via SNMP requests to OIDs iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0. Th...

CVE-2018-20387

Bnmux BCW700J 5.20.7, BCW710J 5.30.6a, and BCW710J2 5.30.16 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests...

CVE-2018-20391

CVE-2018-20391 affects TEKNOTEL CBW700N devices, where remote attackers can discover credentials via SNMP requests (iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and .2.0). The connected records corroborate a credential-discovery scenario exposed through SNMP, with consistent references across CVE/NVD/Red H...

CVE-2018-20381

Technicolor DPC2320 dpc2300r2-v202r1244101-150420a-v6 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests...

PT-2018-15338

Name of the Vulnerable Software and Affected Versions iNovo Broadband IB-8120-W21 version 139.4410mp1.004200.002 iNovo Broadband IB-8120-W21E1 version 139.4410mp1.3921132mp1.899.004404.004 Description The issue allows remote attackers to discover credentials via specific SNMP requests, including...

PT-2018-15337

Name of the Vulnerable Software and Affected Versions ARRIS DG950A version 7.10.145 ARRIS DG950S version 7.10.145.EURO Description The issue allows remote attackers to discover credentials via specific SNMP requests, including "iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0" and...

CVE-2018-20389: Insufficiently Protected Credentials

D-Link DCM-604 DCM604C1ViaCabo1.0420130606 and DCM-704 EUDCM-7041.10 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests...

PT-2018-15334

Name of the Vulnerable Software and Affected Versions Ambit DDW2600 version 5.100.1009 Ambit DDW2602 version 5.105.1003 Ambit T60C926 version 4.64.1012 Ambit U10C019 version 5.66.1026 Description The issue allows remote attackers to discover credentials. This is achieved via specific SNMP request...

PT-2018-15342

Name of the Vulnerable Software and Affected Versions Comtrend CM-6200un version 123.447.007 Comtrend CM-6300n version 123.553mp1.005 Description The issue allows remote attackers to discover credentials via specific SNMP requests, including "iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0" and...

PT-2018-15350

Name of the Vulnerable Software and Affected Versions mplus devices affected versions not specified Description The issue allows remote attackers to discover credentials via specific SNMP requests, including iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0. Recommendation...

PT-2018-15347

Name of the Vulnerable Software and Affected Versions Thomson DWG849 version STC0.01.16 Thomson DWG850-4 version ST9C.05.25 Thomson DWG855 version ST80.20.26 Thomson TWG870 version STB2.01.36 Description The issue allows remote attackers to discover credentials via specific SNMP requests, includi...