CVE-2018-20391

TEKNOTEL CBW700N 81.447.392110.729.024 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and…

published December 23, 2018

CVSS
—
EPSS
2%
Percentile
74.3
In the wild
Unconfirmed
What it is

⚠️ A couple of sneaky SNMP requests can spill out device credentials like a poorly-guarded secret recipe! Think of this as a restaurant kitchen where the chef accidentally leaves the door open. Any passerby can just walk in and grab the recipe book without even trying to break in! An attacker could uncover sensitive credentials simply by sending a few well-crafted SNMP requests, leading to unauthorized access and potential exploitation of the device. This could put the entire network at risk, allowing attackers to control or manipulate the device for their gain.

Put simply

Think of this as a restaurant kitchen where the chef accidentally leaves the door open. Any passerby can just walk in and grab the recipe book without even trying to break in! This vulnerability allows remote attackers to discover credentials by querying specific SNMP OIDs on affected TEKNOTEL CBW700N devices, making it a simple yet effective way to gather sensitive information.

What to do

An attacker could uncover sensitive credentials simply by sending a few well-crafted SNMP requests, leading to unauthorized access and potential exploitation of the device. This could put the entire network at risk, allowing attackers to control or manipulate the device for their gain. To safeguard against this vulnerability, consider disabling SNMP if it's not in use, or limit SNMP access to a known set of IP addresses. Ensure your device firmware is up to date, and review SNMP configurations to minimize exposure. Don’t worry! You can lock this down and protect your devices with these steps—security hero status: activated! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01513 · 74.3th percentile
Published
2018-12-23T21:00Z
EPSS history
Timeline
  • 23 DEC 21:00Z
    TEKNOTEL CBW700N 81.447.392110.729.024 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and…
    cvelistv5