CVE-2018-20399
First published: Sun Dec 23 2018(Updated: )
Motorola SBG901 SBG901-2.10.1.1-GA-00-581-NOSH, SBG941 SBG941-2.11.0.0-GA-07-624-NOSH, and SVG1202 SVG1202-2.1.0.0-GA-14-LTSH devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Motorola Sbg901 Firmware | =sbg901-2.10.1.1-ga-00-581-nosh | |
| Motorola SBG901 | =1.0 | |
| Motorola Sbg941 Firmware | =sbg941-2.11.0.0-ga-07-624-nosh | |
| Motorola Sbg941 | =1.0 | |
| Motorola Svg1202 Firmware | =svg1202-2.1.0.0-ga-14-ltsh | |
| Motorola Svg1202 | =1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2018-20399?
The severity of CVE-2018-20399 is critical with a CVSS score of 9.8.
How can remote attackers exploit CVE-2018-20399?
Remote attackers can exploit CVE-2018-20399 by sending SNMP requests to discover credentials.
Which devices are affected by CVE-2018-20399?
Motorola SBG901, SBG941, and SVG1202 devices are affected by CVE-2018-20399.
How do I fix CVE-2018-20399?
There is currently no known fix for CVE-2018-20399. It is recommended to contact the vendor for further assistance.
Where can I find more information about CVE-2018-20399?
More information about CVE-2018-20399 can be found at the following references: [securityfocus](http://www.securityfocus.com/bid/106320), [github](https://github.com/ezelf/sensitivesOids/blob/master/oidpassswordleaks.csv), [misteralfa-hack](https://misteralfa-hack.blogspot.com/2018/12/stringbleed-y-ahora-que-passwords-leaks.html)
- collector/nvd-index
- agent/severity
- agent/author
- agent/type
- agent/event
- agent/references
- agent/weakness
- agent/description
- agent/softwarecombine
- agent/last-modified-date
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/motorola
- canonical/motorola sbg901 firmware
- version/motorola sbg901 firmware/sbg901-2.10.1.1-ga-00-581-nosh
- canonical/motorola sbg901
- version/motorola sbg901/1.0
- canonical/motorola sbg941 firmware
- version/motorola sbg941 firmware/sbg941-2.11.0.0-ga-07-624-nosh
- canonical/motorola sbg941
- version/motorola sbg941/1.0
- canonical/motorola svg1202 firmware
- version/motorola svg1202 firmware/svg1202-2.1.0.0-ga-14-ltsh
- canonical/motorola svg1202
- version/motorola svg1202/1.0