Motorola SBG901 SBG901-2.10.1.1-GA-00-581-NOSH, SBG941 SBG941-2.11.0.0-GA-07-624-NOSH, and SVG1202 SVG1202-2.1.0.0-GA-14-LTSH devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.
References
| Link | Resource |
|---|---|
| http://www.securityfocus.com/bid/106320 | Third Party Advisory VDB Entry |
| https://github.com/ezelf/sensitivesOids/blob/master/oidpassswordleaks.csv | Third Party Advisory |
| https://misteralfa-hack.blogspot.com/2018/12/stringbleed-y-ahora-que-passwords-leaks.html | Exploit Third Party Advisory |
| http://www.securityfocus.com/bid/106320 | Third Party Advisory VDB Entry |
| https://github.com/ezelf/sensitivesOids/blob/master/oidpassswordleaks.csv | Third Party Advisory |
| https://misteralfa-hack.blogspot.com/2018/12/stringbleed-y-ahora-que-passwords-leaks.html | Exploit Third Party Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
Configuration 2 (hide)
| AND |
|
Configuration 3 (hide)
| AND |
|
History
21 Nov 2024, 04:01
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://www.securityfocus.com/bid/106320 - Third Party Advisory, VDB Entry | |
| References | () https://github.com/ezelf/sensitivesOids/blob/master/oidpassswordleaks.csv - Third Party Advisory | |
| References | () https://misteralfa-hack.blogspot.com/2018/12/stringbleed-y-ahora-que-passwords-leaks.html - Exploit, Third Party Advisory |
Information
Published : 2018-12-23 21:29
Updated : 2024-11-21 04:01
NVD link : CVE-2018-20399
Mitre link : CVE-2018-20399
CVE.ORG link : CVE-2018-20399
JSON object : View
Products Affected
motorola
- sbg901_firmware
- sbg941_firmware
- sbg941
- svg1202
- svg1202_firmware
- sbg901
CWE
CWE-522
Insufficiently Protected Credentials