CVE-2018-20438

Technicolor TC7110.AR STD3.38.03 devices allow remote attackers to discover Wi-Fi credentials via iso.3.6.1.4.1.2863.205.10.1.30.4.1.14.1.3.32 and iso.3.6.1.4.1.2863.205.10.1.30.4.2.4.1.2.32 SNMP requests...

CVE-2018-20439

The CVE concerns Technicolor DPC3928SL devices (D3928SL-PSIP-13-A010-c3420r55105-170214a). Affected component is SNMP handling, where remote attackers can obtain Wi‑Fi credentials by sending specific SNMP requests (SNMP OIDs iso.3.6.1.4.1.4413.2.2.2.1.5.4.1.14.1.3.10001 and 1.3.6.1.4.1.4413.2.2.2...

CVE-2018-20444

CVE-2018-20444 affects Technicolor CGA0111 family (CGA0111E-ES-13-E23E-c8000r5712-170217-0829-TRU). The issue allows remote attackers to obtain Wi‑Fi credentials by sending SNMP requests to OIDs iso.3.6.1.4.1.4413.2.2.2.1.5.4.1.14.1.3.10001 and 1.3.6.1.4.1.4413.2.2.2.1.18.1.2.3.4.1.2.10001. Descr...

CVE-2018-20438

CVE-2018-20438 affects Technicolor TC7110.AR STD3.38.03 devices. The vulnerability allows remote attackers to obtain Wi-Fi credentials by querying SNMP with specific OIDs (iso.3.6.1.4.1.2863.205.10.1.30.4.1.14.1.3.32 and .4.2.4.1.2.32). This is a network-based impact on confidentiality with high/...

CVE-2018-20439

Technicolor DPC3928SL D3928SL-PSIP-13-A010-c3420r55105-170214a devices allow remote attackers to discover Wi-Fi credentials via iso.3.6.1.4.1.4413.2.2.2.1.5.4.1.14.1.3.10001 and 1.3.6.1.4.1.4413.2.2.2.1.18.1.2.3.4.1.2.10001 SNMP requests...

CVE-2018-20440

Technicolor CWA0101 CWA0101E-A23E-c7000r5712-170315-SKC devices allow remote attackers to discover Wi-Fi credentials via iso.3.6.1.4.1.4413.2.2.2.1.5.4.1.14.1.3.10001 and 1.3.6.1.4.1.4413.2.2.2.1.18.1.2.3.4.1.2.10001 SNMP requests...

CVE-2018-20441

CVE-2018-20441 affects Technicolor TC7200.TH2v2 SC05.00.22. The vulnerability allows remote attackers to obtain Wi‑Fi credentials by issuing SNMP requests to specific OIDs (iso.3.6.1.4.1.2863.205.10.1.30.4.1.14.1.3.32 and .4.2.4.1.2.32). NVD metrics list a CVSS v2 base score of 5.0 (PARTIAL confi...

CVE-2018-20444

Technicolor CGA0111 CGA0111E-ES-13-E23E-c8000r5712-170217-0829-TRU devices allow remote attackers to discover Wi-Fi credentials via iso.3.6.1.4.1.4413.2.2.2.1.5.4.1.14.1.3.10001 and 1.3.6.1.4.1.4413.2.2.2.1.18.1.2.3.4.1.2.10001 SNMP requests...

CVE-2018-20442

CVE-2018-20442 affects Technicolor TC7110.B with STC8.62.02. The issue allows remote attackers to obtain Wi‑Fi credentials by sending SNMP requests to specific OIDs (iso.3.6.1.4.1.2863.205.10.1.30.4.1.14.1.3.32 and iso.3.6.1.4.1.2863.205.10.1.30.4.2.4.1.2.32). This results in exposure of Wi‑Fi cr...

PLC Wireless Router GPN2.4P21-C-CN Cross Site Scripting

Exploit Title: PLC Wireless Router GPN2.4P21-C-CN -Reflected XSS Date: 21/12/2018 Exploit Author: Kumar Saurav Vendor: ChinaMobile Category: Hardware Version: GPN2.4P21-C-CN Firmware: W2001EN-00 Tested on: Multiple CVE : CVE-2018-20326 Description: PLC Wireless Router's are vulnerable to a...

Design/Logic Flaw

An issue was discovered on Xiaomi Mi A1 tissotsprout:8.1.0/OPM1.171019.026/V9.6.4.0.ODHMIFE devices. They store cleartext Wi-Fi passwords in logcat during the process of setting up the phone as a hotspot...

CVE-2018-18698

An issue was discovered on Xiaomi Mi A1 tissotsprout:8.1.0/OPM1.171019.026/V9.6.4.0.ODHMIFE devices. They store cleartext Wi-Fi passwords in logcat during the process of setting up the phone as a hotspot...

CVE-2018-18698

An issue was discovered on Xiaomi Mi A1 tissotsprout:8.1.0/OPM1.171019.026/V9.6.4.0.ODHMIFE devices. They store cleartext Wi-Fi passwords in logcat during the process of setting up the phone as a hotspot...

CVE-2018-18698

Affected product/variant: Xiaomi Mi A1 (tissot_sprout) running 8.1.0/OPM1.171019.026/V9.6.4.0.ODHMIFE. Vulnerability detail: The device stores cleartext Wi‑Fi passwords in logcat during the process of enabling hotspot, exposing credentials. Impact: Unauthorized disclosure of Wi‑Fi passwords. Root...

CVE-2018-20377

Orange Livebox 00.96.320S devices allow remote attackers to discover Wi-Fi credentials via /getgetnetworkconf.cgi on port 8080, leading to full control if the admin password equals the Wi-Fi password or has the default admin value. This is related to Firmware 01.11.2017-11:43:44, Boot v0.70.03,...

Default credentials

Orange Livebox 00.96.320S devices allow remote attackers to discover Wi-Fi credentials via /getgetnetworkconf.cgi on port 8080, leading to full control if the admin password equals the Wi-Fi password or has the default admin value. This is related to Firmware 01.11.2017-11:43:44, Boot v0.70.03,...

CVE-2018-20377

Orange Livebox ADSL modems (e.g., Arcadyan ARV7519RW22-A-L T VR9 1.2; firmware 00.96.320S) expose Wi‑Fi credentials via unauthenticated GET /get_getnetworkconf.cgi on port 8080. The underlying issue is information disclosure where the webserver returns the SSID and Wi‑Fi password in plaintext, en...

CVE-2018-20377

Orange Livebox 00.96.320S devices allow remote attackers to discover Wi-Fi credentials via /getgetnetworkconf.cgi on port 8080, leading to full control if the admin password equals the Wi-Fi password or has the default admin value. This is related to Firmware 01.11.2017-11:43:44, Boot v0.70.03,...

Authentication flaw

D-Link DCS series Wi-Fi cameras expose sensitive information regarding the device configuration. The affected devices include many of DCS series, such as: DCS-936L, DCS-942L, DCS-8000LH, DCS-942LB1, DCS-5222L, DCS-825L, DCS-2630L, DCS-820L, DCS-855L, DCS-2121, DCS-5222LB1, DCS-5020L, and many mor...

Default credentials

An issue was discovered in D-Link 'myDlink Baby App' version 2.04.06. Whenever actions are performed from the app e.g., change camera settings or play lullabies, it communicates directly with the Wi-Fi camera D-Link 825L firmware 1.08 with the credentials username and password in base64 cleartext...