CVE-2018-20438

Severity: critical (CVSS 9.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.4% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2018-12-25 · updated 2026-06-17
Weakness: CWE-522

Description

Technicolor TC7110.AR STD3.38.03 devices allow remote attackers to discover Wi-Fi credentials via iso.3.6.1.4.1.2863.205.10.1.30.4.1.14.1.3.32 and iso.3.6.1.4.1.2863.205.10.1.30.4.2.4.1.2.32 SNMP requests.

Affected products

Technicolor Tc7110.Ar Firmware: all versions

References

https://misteralfa-hack.blogspot.com/2018/12/technicolor-passwords-wireless-via-snmp.html
https://misteralfa-hack.blogspot.com/2018/12/technicolor-passwords-wireless-via-snmp.html

Get alerted when CVE-2018-20438 or the next vulnerability affects your stack