CVE-2018-20442

Technicolor TC7110.B STC8.62.02 devices allow remote attackers to discover Wi-Fi credentials via iso.3.6.1.4.1.2863.205.10.1.30.4.1.14.1.3.32 and…

published December 25, 2018

CVSS
—
EPSS
1%
Percentile
71.6
In the wild
Unconfirmed
What it is

⚠️ A remote attacker can effortlessly uncover your Wi-Fi credentials through SNMP requests — talk about a security nightmare! 💡 It's like leaving your front door open with a sign that says, 'Help yourself to my Wi-Fi!' A crafty visitor could stroll right in without breaking a sweat. If an attacker can access your Wi-Fi credentials, they could easily invade your network, snooping on your data and potentially compromising other devices connected to it. This vulnerability poses a risk of unauthorized access to your personal information and activities.

Put simply

It's like leaving your front door open with a sign that says, 'Help yourself to my Wi-Fi!' A crafty visitor could stroll right in without breaking a sweat. This vulnerability allows remote attackers to retrieve Wi-Fi credentials from Technicolor TC7110.B STC8.62.02 devices by sending specific SNMP requests that exploit weak configurations in the device's settings.

What to do

If an attacker can access your Wi-Fi credentials, they could easily invade your network, snooping on your data and potentially compromising other devices connected to it. This vulnerability poses a risk of unauthorized access to your personal information and activities. To mitigate this issue, ensure that SNMP is disabled on your device if not needed. Additionally, regularly update your device firmware and change default community strings to strengthen security. You've got this! With these steps, you'll be one step closer to locking down your network and maintaining your hero status! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01367 · 71.6th percentile
Published
2018-12-25T15:00Z
EPSS history
Timeline
  • 25 DEC 15:00Z
    Technicolor TC7110.B STC8.62.02 devices allow remote attackers to discover Wi-Fi credentials via iso.3.6.1.4.1.2863.205.10.1.30.4.1.14.1.3.32 and…
    cvelistv5