CVE-2018-20399
9.8
CRITICAL · CVSS 3.0 · EPSS 2.6% (pctl 85)
In your normal cycle
Critical by CVSS (9.8), but no sign of active exploitation.
Description
Motorola SBG901 SBG901-2.10.1.1-GA-00-581-NOSH, SBG941 SBG941-2.11.0.0-GA-07-624-NOSH, and SVG1202 SVG1202-2.1.0.0-GA-14-LTSH devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.
Scoring
| CVSS | 9.8 (CRITICAL, v3.0) |
|---|---|
| Vector | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| EPSS | 2.59% — more likely to be exploited than 85% of all CVEs |
| Weakness | CWE-522 |
| On CISA KEV | no |
| Public exploit | none known |
| Published | 2018-12-23 |
| Last modified | 2026-06-17 |
Affected (6)
| Vendor | Product |
|---|---|
| motorola | sbg901 |
| motorola | sbg901 firmware |
| motorola | sbg941 |
| motorola | sbg941 firmware |
| motorola | svg1202 |
| motorola | svg1202 firmware |
References
- http://www.securityfocus.com/bid/106320
- https://github.com/ezelf/sensitivesOids/blob/master/oidpassswordleaks.csv
- https://misteralfa-hack.blogspot.com/2018/12/stringbleed-y-ahora-que-passwords-leaks.html
- http://www.securityfocus.com/bid/106320
- https://github.com/ezelf/sensitivesOids/blob/master/oidpassswordleaks.csv
- https://misteralfa-hack.blogspot.com/2018/12/stringbleed-y-ahora-que-passwords-leaks.html
→ the Explorer · watch your stack · NVD