CVE-2018-20399

Motorola SBG901 SBG901-2.10.1.1-GA-00-581-NOSH, SBG941 SBG941-2.11.0.0-GA-07-624-NOSH, and SVG1202 SVG1202-2.1.0.0-GA-14-LTSH devices allow remote attackers to…

published December 23, 2018

CVSS
—
EPSS
3%
Percentile
85.2
In the wild
Unconfirmed
What it is

🚨 A couple of sneaky SNMP requests can spill your device's credentials! How wild is that? Think of it as a restaurant giving away the secret recipe to its signature dish just by asking the right question at the front counter — no verification required! 🍽️ An attacker could potentially gain access to sensitive credentials, opening the door to unauthorized control over the affected devices. This could lead to data leaks or even complete device takeover, compromising your entire network. Absolutely devastating!

Put simply

Think of it as a restaurant giving away the secret recipe to its signature dish just by asking the right question at the front counter — no verification required! 🍽️ This vulnerability allows remote attackers to retrieve credentials by sending specific SNMP requests to Motorola devices, such as the SBG901 and SVG1202, which don't properly secure their SNMP interfaces.

What to do

An attacker could potentially gain access to sensitive credentials, opening the door to unauthorized control over the affected devices. This could lead to data leaks or even complete device takeover, compromising your entire network. Absolutely devastating! To protect your devices, disable SNMP if it's not needed or configure it to restrict access. Ensure you apply any available firmware updates to close this security gap. Regularly audit your network for vulnerable devices as well! You've got this! Just follow these steps, and you'll have your network locked down in no time! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02590 · 85.2th percentile
Published
2018-12-23T21:00Z
EPSS history
Timeline
  • 23 DEC 21:00Z
    Motorola SBG901 SBG901-2.10.1.1-GA-00-581-NOSH, SBG941 SBG941-2.11.0.0-GA-07-624-NOSH, and SVG1202 SVG1202-2.1.0.0-GA-14-LTSH devices allow remote attackers to…
    cvelistv5