CVE-2018-20438

Technicolor TC7110.AR STD3.38.03 devices allow remote attackers to discover Wi-Fi credentials via iso.3.6.1.4.1.2863.205.10.1.30.4.1.14.1.3.32 and…

published December 25, 2018

CVSS
—
EPSS
1%
Percentile
71.6
In the wild
Unconfirmed
What it is

⚠️ A remote attacker can fish for your Wi-Fi credentials with just a couple of sneaky SNMP requests! Think of it like a delivery driver who can read your package label just by asking the right questions — all they need is access to your delivery service's database to pull out sensitive information without breaking a sweat. This vulnerability allows attackers to easily discover your Wi-Fi credentials, putting your home network at risk. If they get hold of your Wi-Fi, they could snoop on your data or even launch further attacks against devices on your network. It’s like leaving your front door wide open — anyone can stroll right in!

Put simply

Think of it like a delivery driver who can read your package label just by asking the right questions — all they need is access to your delivery service's database to pull out sensitive information without breaking a sweat. The vulnerability in Technicolor TC7110.AR devices allows remote attackers to retrieve Wi-Fi credentials through specific SNMP requests that target the device's object identifiers for Wi-Fi settings.

What to do

This vulnerability allows attackers to easily discover your Wi-Fi credentials, putting your home network at risk. If they get hold of your Wi-Fi, they could snoop on your data or even launch further attacks against devices on your network. It’s like leaving your front door wide open — anyone can stroll right in! To mitigate this risk, configure your SNMP settings to restrict access, disable SNMP if it's not in use, and regularly review your network security settings. Keeping your device firmware updated can also help close any security gaps. You've got this! By taking a few smart steps, you can keep your network secure and protect your digital fortress! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01367 · 71.6th percentile
Published
2018-12-25T15:00Z
EPSS history
Timeline
  • 25 DEC 15:00Z
    Technicolor TC7110.AR STD3.38.03 devices allow remote attackers to discover Wi-Fi credentials via iso.3.6.1.4.1.2863.205.10.1.30.4.1.14.1.3.32 and…
    cvelistv5