CVE-2018-20380

Ambit DDW2600 5.100.1009, DDW2602 5.105.1003, T60C926 4.64.1012, and U10C019 5.66.1026 devices allow remote attackers to discover credentials via…

published December 23, 2018

CVSS
—
EPSS
2%
Percentile
75.4
In the wild
Unconfirmed
What it is

⚠️ A pair of sneaky SNMP requests could spill the beans on your credentials! These unprotected Ambit devices are like open books waiting for the wrong reader. 📖 Think of it like a hotel receptionist who, without any security training, hands over room keys to anyone asking. With the right requests, attackers can easily access sensitive information without breaking a sweat. If exploited, remote attackers could uncover usernames and passwords, leaving your network wide open for a breach. It's like leaving the door unlocked and the welcome mat out for unwanted guests! 🔓

Put simply

Think of it like a hotel receptionist who, without any security training, hands over room keys to anyone asking. With the right requests, attackers can easily access sensitive information without breaking a sweat. This vulnerability in Ambit DDW2600, DDW2602, T60C926, and U10C019 devices arises from improperly secured SNMP responses, which expose sensitive credential information through specific OIDs (Object Identifiers).

What to do

If exploited, remote attackers could uncover usernames and passwords, leaving your network wide open for a breach. It's like leaving the door unlocked and the welcome mat out for unwanted guests! 🔓 To protect your devices, update to the latest firmware versions available for your model, disable unnecessary SNMP features, and restrict SNMP access to trusted IP addresses only. Consider implementing stronger authentication measures for SNMP requests. You've got this! Follow these steps and you'll be on your way to securing those devices in no time. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01596 · 75.4th percentile
Published
2018-12-23T21:00Z
EPSS history
Timeline
  • 23 DEC 21:00Z
    Ambit DDW2600 5.100.1009, DDW2602 5.105.1003, T60C926 4.64.1012, and U10C019 5.66.1026 devices allow remote attackers to discover credentials via…
    cvelistv5