CVE-2018-20400

Ubee DVW2108 6.28.1017 and DVW2110 6.28.2012 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and…

published December 23, 2018

CVSS
—
EPSS
2%
Percentile
74.3
In the wild
Unconfirmed
What it is

🚨 Remote attackers can uncover sensitive credentials with a simple SNMP request! That's a recipe for disaster! ⚠️ Think of it like a hotel concierge who hands out room keys without verifying who’s asking — a sneaky way to get inside! An attacker could potentially access private information, putting your network and users at risk. If they discover these credentials, it could lead to unauthorized access and a whole series of security breaches.

Put simply

Think of it like a hotel concierge who hands out room keys without verifying who’s asking — a sneaky way to get inside! This vulnerability in Ubee DVW2108 and DVW2110 devices allows remote attackers to retrieve sensitive credentials through specific SNMP requests, exposing them to anyone willing to ask.

What to do

An attacker could potentially access private information, putting your network and users at risk. If they discover these credentials, it could lead to unauthorized access and a whole series of security breaches. To mitigate this risk, ensure SNMP is properly configured and restrict access. If possible, consider changing the default community strings for SNMP and regularly audit your network devices for any misconfigurations. 🛡️ You’ve got this! By taking the steps to harden your devices, you'll boost your security in no time! 💪✨

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01513 · 74.3th percentile
Published
2018-12-23T21:00Z
EPSS history
Timeline
  • 23 DEC 21:00Z
    Ubee DVW2108 6.28.1017 and DVW2110 6.28.2012 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and…
    cvelistv5