CVE-2018-20512: Critical severity cdatatec epon cpe-wifi devices firmware vulnerability
Published Jan 3, 2019
·Updated
EPON CPE-WiFi devices 2.0.4-X000 are vulnerable to escalation of privileges by sending cooLogin=1, cooUser=admin, and timestamp=-1 cookies.
Affected Software
22 affected components
Cdatatec Epon Cpe-wifi Devices Firmware=2.0.4-x000
Cdatatec Fd108bn
Cdatatec Fd111hz
Cdatatec Fd111y
Cdatatec Fd114y
Cdatatec Fd212gw
Cdatatec Fd212h
Cdatatec Fd214gh
Cdatatec Fd214gw
Cdatatec Fd404gh
Cdatatec Fd404gw
Cdatatec Fd600-104
Cdatatec Fd600-104g
Cdatatec Fd600-108f-hz500
Cdatatec Fd600-111g
Cdatatec Fd600-111gw
Cdatatec Fd600-301
Cdatatec Fd600-301gw
Cdatatec Fd600-304
Cdatatec Fd600-304ga-hr500
Cdatatec Fd600-304ga-hr511
Cdatatec Fd600-521g
Event History
Jan 3, 2019
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-20512?
CVE-2018-20512 has been classified as a high severity vulnerability due to the potential for privilege escalation.
2
How do I fix CVE-2018-20512?
To mitigate CVE-2018-20512, users should upgrade their EPON CPE-WiFi devices to firmware version 2.0.4 or later, if available.
3
Who is affected by CVE-2018-20512?
CVE-2018-20512 specifically affects EPON CPE-WiFi devices running firmware version 2.0.4-X000.
4
What type of vulnerability is CVE-2018-20512?
CVE-2018-20512 is an escalation of privileges vulnerability.
5
Is CVE-2018-20512 exploitable remotely?
Yes, CVE-2018-20512 can be exploited remotely by sending specific cookies to the vulnerable device.