PT-2018-15377 · Technicolor · Technicolor Tc7110.Ar Std
Capitan Alfalo
·
Published
2018-12-25
·
Updated
2019-10-03
·
CVE-2018-20438
CVSS v2.0
5.0
Medium
| Vector | AV:N/AC:L/Au:N/C:P/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Technicolor TC7110.AR STD version 3.38.03
Description
The issue allows remote attackers to discover Wi-Fi credentials. This is achieved through specific SNMP requests, including
iso.3.6.1.4.1.2863.205.10.1.30.4.1.14.1.3.32 and iso.3.6.1.4.1.2863.205.10.1.30.4.2.4.1.2.32.Recommendations
For Technicolor TC7110.AR STD version 3.38.03, consider restricting access to the SNMP service to minimize the risk of exploitation. As a temporary workaround, limit the use of the affected SNMP requests until a patch is available. At the moment, there is no information about a newer version that contains a fix for this issue.
Exploit
Fix
Insufficiently Protected Credentials
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Technicolor Tc7110.Ar Std