What’s Vulnerable › Vulnerabilities

CVE-2018-20393

• Severity: critical (CVSS 9.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.6% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2018-12-23 · updated 2026-06-17

Description

Technicolor CGA0111 CGA0111E-ES-13-E23E-c8000r5712-170217-0829-TRU, CWA0101 CWA0101E-A23E-c7000r5712-170315-SKC, DPC3928SL D3928SL-PSIP-13-A010-c3420r55105-170214a, TC7110.AR STD3.38.03, TC7110.B STC8.62.02, TC7110.D STDB.79.02, TC7200.d1I TC7200.d1IE-N23E-c7000r5712-170406-HAT, and TC7200.TH2v2 SC05.00.22 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.

Affected products

• Technicolor Cga0101 Firmware: cwa0101e-a23e-c7000r5712-170315-skc
• Technicolor Cga0111 Firmware: cga0111e-es-13-e23e-c8000r5712-170217-0829-tru
• Technicolor Dpc3928Sl Firmware: d3928sl-psip-13-a010-c3420r55105-170214a
• Technicolor Tc7110.Ar Firmware: std3.38.03
• Technicolor Tc7110.B Firmware: stc8.62.02
• Technicolor Tc7110.D Firmware: stdb.79.02
• Technicolor Tc7200.D1I Firmware: tc7200.d1ie-n23e-c7000r5712-170406-hat
• Technicolor Tc7200.Th2V2.D1I Firmware: sc05.00.22

References

• https://github.com/ezelf/sensitivesOids/blob/master/oidpassswordleaks.csv
• https://misteralfa-hack.blogspot.com/2018/12/stringbleed-y-ahora-que-passwords-leaks.html
• https://github.com/ezelf/sensitivesOids/blob/master/oidpassswordleaks.csv
• https://misteralfa-hack.blogspot.com/2018/12/stringbleed-y-ahora-que-passwords-leaks.html

Get alerted when CVE-2018-20393 or the next vulnerability affects your stack