CVE-2018-20385
First published: Sun Dec 23 2018(Updated: )
CastleNet CBV38Z4EC 125.553mp1.39219mp1.899.007, CBV38Z4ECNIT 125.553mp1.39219mp1.899.005ITT, CBW383G4J 37.556mp5.008, and CBW38G4J 37.553mp1.008 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Castlenet Cbv38z4ec Firmware | =25.553mp1.39219mp1.899.007 | |
| Castlenet Cbv38z4ec Firmware | =1.0 | |
| Castlenet Cbv38z4ecnit | =125.553mp1.39219mp1.899.005itt | |
| Castlenet Cbv38z4ecnit Firmware | =1.0 | |
| Castlenet Cbw383g4j | =37.556mp5.008 | |
| Castlenet Cbw383g4j Firmware | =1.01 | |
| Castlenet Cbw38g4j | =37.553mp1.008 | |
| Castlenet Cbw38g4j Firmware | =1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2018-20385?
CVE-2018-20385 is a medium severity vulnerability that allows remote attackers to discover credentials.
How do I fix CVE-2018-20385?
To fix CVE-2018-20385, update the affected devices to a patched firmware version that addresses the vulnerability.
Which devices are affected by CVE-2018-20385?
CVE-2018-20385 affects CastleNet models such as CBV38Z4EC, CBV38Z4ECNIT, CBW383G4J, and CBW38G4J.
What type of attack does CVE-2018-20385 enable?
CVE-2018-20385 enables remote attackers to exploit SNMP requests to retrieve sensitive credentials.
Is CVE-2018-20385 easy to exploit?
Yes, the vulnerability can be easily exploited by remote attackers familiar with SNMP protocols.
- agent/references
- agent/type
- agent/softwarecombine
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/severity
- agent/last-modified-date
- agent/weakness
- agent/description
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/castlenet
- canonical/castlenet cbv38z4ec firmware
- version/castlenet cbv38z4ec firmware/25.553mp1.39219mp1.899.007
- version/castlenet cbv38z4ec firmware/1.0
- canonical/castlenet cbv38z4ecnit
- version/castlenet cbv38z4ecnit/125.553mp1.39219mp1.899.005itt
- canonical/castlenet cbv38z4ecnit firmware
- version/castlenet cbv38z4ecnit firmware/1.0
- canonical/castlenet cbw383g4j
- version/castlenet cbw383g4j/37.556mp5.008
- canonical/castlenet cbw383g4j firmware
- version/castlenet cbw383g4j firmware/1.01
- canonical/castlenet cbw38g4j
- version/castlenet cbw38g4j/37.553mp1.008
- canonical/castlenet cbw38g4j firmware
- version/castlenet cbw38g4j firmware/1.0