Zoom 5352 Information Disclosure Vulnerability

The Zoom 5352 is a modem device from Zoom Telephonics USA. An information disclosure vulnerability exists in the Zoom 5352 version 5.5.8.6Y, which can be exploited by a remote attacker to obtain credentials by sending an SNMP request...

CVE-2018-20401

Zoom 5352 v5.5.8.6Y devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests...

Design/Logic Flaw

Zoom 5352 v5.5.8.6Y devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests...

CVE-2018-20401

The CVE-2018-20401 entry applies to Zoom 5352 devices running version 5.5.8.6Y, where an information-disclosure flaw allows remote attackers to obtain credentials by querying SNMP using two OIDs (iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0). The underlying issue is a...

CVE-2018-20401

Zoom 5352 v5.5.8.6Y devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests...

PT-2018-15354

Name of the Vulnerable Software and Affected Versions Zoom 5352 version 5.5.8.6Y Description The issue allows remote attackers to discover credentials via specific SNMP requests, including iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0. Recommendations For Zoom 5352...

CVE-2018-20401: Insufficiently Protected Credentials

Zoom 5352 v5.5.8.6Y devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests...