First published: Sun Dec 23 2018(Updated: )
Kaonmedia CG2001-AN22A 1.2.1, CG2001-UDBNA 3.0.8, and CG2001-UN2NA 3.0.8 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Kaonmedia CG2001-AN22A | =1.2.1 | |
Kaonmedia Cg2001-an22a Firmware | =0.6 | |
Kaonmedia Cg2001-udbna | =3.0.8 | |
Kaonmedia Cg2001-udbna Firmware | =1.0 | |
Kaonmedia Cg2001-un2na | =3.0.8 | |
Kaonmedia Cg2001-un2na Firmware | =1.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2018-20390 has a medium severity level as it allows remote attackers to discover credentials through SNMP requests.
To fix CVE-2018-20390, users should update their Kaonmedia devices to the latest firmware version that addresses this vulnerability.
CVE-2018-20390 affects Kaonmedia CG2001-AN22A version 1.2.1, CG2001-UDNA version 3.0.8, and CG2001-UN2NA version 3.0.8.
CVE-2018-20390 poses a security risk by allowing attackers to retrieve sensitive credentials from affected devices.
CVE-2018-20390 is considered a specific vulnerability that can be exploited in certain models of Kaonmedia devices, making it relatively uncommon in its application.