Vulnerability Description
Motorola SBG901 SBG901-2.10.1.1-GA-00-581-NOSH, SBG941 SBG941-2.11.0.0-GA-07-624-NOSH, and SVG1202 SVG1202-2.1.0.0-GA-14-LTSH devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Motorola | Sbg901 Firmware | sbg901-2.10.1.1-ga-00-581-nosh |
| Motorola | Sbg901 | 1.0 |
| Motorola | Sbg941 Firmware | sbg941-2.11.0.0-ga-07-624-nosh |
| Motorola | Sbg941 | 1.0 |
| Motorola | Svg1202 Firmware | svg1202-2.1.0.0-ga-14-ltsh |
| Motorola | Svg1202 | 1.0 |
Related Weaknesses (CWE)
References
- http://www.securityfocus.com/bid/106320Third Party AdvisoryVDB Entry
- https://github.com/ezelf/sensitivesOids/blob/master/oidpassswordleaks.csvThird Party Advisory
- https://misteralfa-hack.blogspot.com/2018/12/stringbleed-y-ahora-que-passwords-lExploitThird Party Advisory
- http://www.securityfocus.com/bid/106320Third Party AdvisoryVDB Entry
- https://github.com/ezelf/sensitivesOids/blob/master/oidpassswordleaks.csvThird Party Advisory
- https://misteralfa-hack.blogspot.com/2018/12/stringbleed-y-ahora-que-passwords-lExploitThird Party Advisory
FAQ
What is CVE-2018-20399?
CVE-2018-20399 is a vulnerability with a CVSS score of 9.8 (CRITICAL). Motorola SBG901 SBG901-2.10.1.1-GA-00-581-NOSH, SBG941 SBG941-2.11.0.0-GA-07-624-NOSH, and SVG1202 SVG1202-2.1.0.0-GA-14-LTSH devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4...
How severe is CVE-2018-20399?
CVE-2018-20399 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2018-20399?
Check the references section above for vendor advisories and patch information. Affected products include: Motorola Sbg901 Firmware, Motorola Sbg901, Motorola Sbg941 Firmware, Motorola Sbg941, Motorola Svg1202 Firmware.