CVE-2018-20393
Critical
Description
Technicolor CGA0111 CGA0111E-ES-13-E23E-c8000r5712-170217-0829-TRU, CWA0101 CWA0101E-A23E-c7000r5712-170315-SKC, DPC3928SL D3928SL-PSIP-13-A010-c3420r55105-170214a, TC7110.AR STD3.38.03, TC7110.B STC8.62.02, TC7110.D STDB.79.02, TC7200.d1I TC7200.d1IE-N23E-c7000r5712-170406-HAT, and TC7200.TH2v2 SC05.00.22 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.
SeverityCritical
CVSS9.8
Exploit probability—
ProductTechnicolor Cga0111 Firmware
PublishedDec 23, 2018
First seenDec 23, 2018
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| technicolor cga0111_firmware | cga0111e-es-13-e23e-c8000r5712-170217-0829-tru | — |
| technicolor cga0101_firmware | cwa0101e-a23e-c7000r5712-170315-skc | — |
| technicolor dpc3928sl_firmware | d3928sl-psip-13-a010-c3420r55105-170214a | — |
| technicolor tc7110.ar_firmware | std3.38.03 | — |
| technicolor tc7110.b_firmware | stc8.62.02 | — |
| technicolor tc7110.d_firmware | stdb.79.02 | — |
| technicolor tc7200.d1i_firmware | tc7200.d1ie-n23e-c7000r5712-170406-hat | — |
| technicolor tc7200.th2v2.d1i_firmware | sc05.00.22 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.