PT-2018-15337 · Arris · Arris Dg950A

Capitan Alfalo · Publicado 2018-12-23 · Atualizado 2021-09-13 · CVE-2018-20383

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ARRIS DG950A version 7.10.145 ARRIS DG950S version 7.10.145.EURO

Description The issue allows remote attackers to discover credentials via specific SNMP requests, including "iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0" and "iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0".

Recommendations For ARRIS DG950A version 7.10.145, restrict access to the SNMP requests "iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0" and "iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0" to minimize the risk of exploitation. For ARRIS DG950S version 7.10.145.EURO, restrict access to the SNMP requests "iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0" and "iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0" to minimize the risk of exploitation.

Exploit

Correção

Insufficiently Protected Credentials

Enumeração de Fraquezas

CWE-522

Identificadores relacionados

CVE-2018-20383

Produtos afetados

Arris Dg950A

Referências · 5

• 🔥 https://misteralfa-hack.blogspot.com/2018/12/stringbleed-y-ahora-que-passwords-leaks.html · Exploit
• https://github.com/ezelf/sensitivesOids/blob/master/oidpassswordleaks.csv · Nota
• https://t.me/cvenotify/19906 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2018-20383 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-20383 · Aviso do Fabricante