CVE-2018-20398

Skyworth CM5100 V1.1.0, CM5100-440 V1.2.1, CM5100-511 4.1.0.14, CM5100-GHD00 V1.2.2, and CM5100.g2 4.1.0.17 devices allow remote attackers to discover…

published December 23, 2018

CVSS
—
EPSS
2%
Percentile
81.6
In the wild
Unconfirmed
What it is

🚨 Time to check your Skyworth devices! A simple SNMP request could expose sensitive credentials. 🔍 Think of it like a diner revealing customer orders just from a casual chat with the waiter—no password required! 📜 An attacker could uncover login credentials with just a few SNMP requests, potentially allowing unauthorized access to your devices. While it may not be actively exploited, the potential for misuse remains a significant concern.

Put simply

Think of it like a diner revealing customer orders just from a casual chat with the waiter—no password required! 📜 This vulnerability allows remote attackers to discover credentials through specific SNMP requests targeting certain Skyworth CM5100 device models, revealing sensitive information without authentication.

What to do

An attacker could uncover login credentials with just a few SNMP requests, potentially allowing unauthorized access to your devices. While it may not be actively exploited, the potential for misuse remains a significant concern. To secure your devices, disable SNMP or restrict access to trusted IP addresses. Consider updating to any available firmware versions that address this vulnerability, ensuring your devices are only accessible to trusted users. You've got this! Stay proactive and keep your devices secure! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02103 · 81.6th percentile
Published
2018-12-23T21:00Z
EPSS history
Timeline
  • 23 DEC 21:00Z
    Skyworth CM5100 V1.1.0, CM5100-440 V1.2.1, CM5100-511 4.1.0.14, CM5100-GHD00 V1.2.2, and CM5100.g2 4.1.0.17 devices allow remote attackers to discover…
    cvelistv5