CVE-2018-17969

Samsung SCX-6545X V2.00.03.01 03-23-2012 devices allows remote attackers to discover cleartext credentials via iso.3.6.1.4.1.236.11.5.11.81.10.1.5.0 and…

published October 3, 2018

CVSS
—
EPSS
1%
Percentile
71.6
In the wild
Unconfirmed
What it is

⚠️ A simple SNMP request is all it takes to expose cleartext credentials from Samsung SCX-6545X devices! This could leave sensitive information vulnerable to prying eyes. 🔍 Think of it like sending a postcard with your private information written clearly for anyone to read — even though it’s meant to be secure, anyone who knows where to look can see what's inside. If an attacker sends the right SNMP request, they could easily discover usernames and passwords stored in plain text. This means they could potentially gain unauthorized access to your network, putting sensitive data and operations at serious risk.

Put simply

Think of it like sending a postcard with your private information written clearly for anyone to read — even though it’s meant to be secure, anyone who knows where to look can see what's inside. This vulnerability allows remote attackers to retrieve cleartext credentials via specific SNMP requests, which means sensitive authentication details are not adequately protected.

What to do

If an attacker sends the right SNMP request, they could easily discover usernames and passwords stored in plain text. This means they could potentially gain unauthorized access to your network, putting sensitive data and operations at serious risk. To safeguard your devices, disable SNMP access if it’s not in use, or restrict access to trusted IP addresses only. It's also advisable to regularly change passwords and audit your device configurations for any vulnerabilities. You've got this! By taking these precautions, you can protect your devices and keep your information safe. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01367 · 71.6th percentile
Published
2018-10-03T19:00Z
EPSS history
Timeline
  • 03 OCT 19:00Z
    Samsung SCX-6545X V2.00.03.01 03-23-2012 devices allows remote attackers to discover cleartext credentials via iso.3.6.1.4.1.236.11.5.11.81.10.1.5.0 and…
    cvelistv5