CVE-2018-20383

ARRIS DG950A 7.10.145 and DG950S 7.10.145.EURO devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and…

published December 23, 2018

CVSS
—
EPSS
2%
Percentile
78.6
In the wild
Unconfirmed
What it is

⚠️ A couple of sneaky SNMP requests can expose sensitive credentials from your ARRIS DG950A and DG950S devices! 🚨 Think of this like a restaurant where anyone can walk into the kitchen and read the recipe book. Those SNMP requests are the unguarded door, letting potential attackers peek at your secret ingredients — your credentials! This could lead to unauthorized access to your network, allowing attackers to compromise your devices and abuse them in various ways. Imagine someone hijacking your Wi-Fi and using it for nefarious purposes or even spying on your activity—yikes!

Put simply

Think of this like a restaurant where anyone can walk into the kitchen and read the recipe book. Those SNMP requests are the unguarded door, letting potential attackers peek at your secret ingredients — your credentials! The vulnerability arises from a lack of proper access controls in the SNMP protocol, where specific requests can retrieve sensitive information like credentials without authentication.

What to do

This could lead to unauthorized access to your network, allowing attackers to compromise your devices and abuse them in various ways. Imagine someone hijacking your Wi-Fi and using it for nefarious purposes or even spying on your activity—yikes! To protect yourself, disable SNMP on these devices if it's not needed, or secure it with strong access controls. Regularly update your firmware to the latest version to ensure any security patches are applied. You've got this! Follow these steps, and you’re on your way to being a security hero! 🦸‍♂️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01823 · 78.6th percentile
Published
2018-12-23T21:00Z
EPSS history
Timeline
  • 23 DEC 21:00Z
    ARRIS DG950A 7.10.145 and DG950S 7.10.145.EURO devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and…
    cvelistv5