CVE-2018-20393 - CVE House
Back to Database
Status published Critical CVE-2018-20393

Technicolor CGA0111 CGA0111E-ES-13-E23E-c8000r5712-170217-0829-TRU, CWA0101 CWA0101E-A23E-c7000r5712-170315-SKC, DPC3928SL D3928SL-PSIP-13-A010-c3420r55105-170214a, TC7110.AR STD3.38.03, TC7110.B...

Vulnerability Description

Technicolor CGA0111 CGA0111E-ES-13-E23E-c8000r5712-170217-0829-TRU, CWA0101 CWA0101E-A23E-c7000r5712-170315-SKC, DPC3928SL D3928SL-PSIP-13-A010-c3420r55105-170214a, TC7110.AR STD3.38.03, TC7110.B STC8.62.02, TC7110.D STDB.79.02, TC7200.d1I TC7200.d1IE-N23E-c7000r5712-170406-HAT, and TC7200.TH2v2 SC05.00.22 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-20393

Credits & Attribution

No credits recorded in the NVD database.

References

More from technicolor

View All →
CVE-2020-11449
An issue was discovered on Technicolor TC7337 8.89.17 devices. An...
High 7.5
CVE-2020-10376
Technicolor TC7337NET 08.89.17.23.03 devices allow remote attackers to discover passwords...
Critical 9.8
CVE-2019-19495
The web interface on the Technicolor TC7230 STEB 01.25 is...
Critical 9.8
CVE-2019-18396
An issue was discovered in certain Oi third-party firmware that...
High 7.2
CVE-2019-17524
An XSS vulnerability on Technicolor TC7300 STFA.51.20 devices allows remote...
Medium 5.4

Affected Vendor

technicolor

View all reports →

Affected Software

cga0111 firmware, cga0101 firmware, dpc3928sl firmware, tc7110.ar firmware, tc7110.b firmware, tc7110.d firmware, tc7200.d1i firmware, tc7200.th2v2.d1i firmware
Vulnerable Versions:
cga0111e-es-13-e23e-c8000r5712-170217-0829-tru, cwa0101e-a23e-c7000r5712-170315-skc, d3928sl-psip-13-a010-c3420r55105-170214a, std3.38.03, stc8.62.02, stdb.79.02, tc7200.d1ie-n23e-c7000r5712-170406-hat, sc05.00.22

Timeline

Official Publish: December 23rd, 2018
Last Modified: September 16th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.