What’s Vulnerable › Vulnerabilities
CVE-2018-18375
- Severity: critical (CVSS 9.8 v3.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 1.3% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2018-10-16 · updated 2026-06-17
- Weakness: CWE-330
Description
goform/getProfileList in Orange AirBox Y858_FL_01.16_04 allows attackers to extract APN data (name, number, username, and password) via the rand parameter.
Affected products
- Orange Airbox Firmware: y858_fl_01.16_04
References
Get alerted when CVE-2018-18375 or the next vulnerability affects your stack