CVE-2018-20440

Severity: critical (CVSS 9.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.4% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2018-12-25 · updated 2026-06-17
Weakness: CWE-522

Description

Technicolor CWA0101 CWA0101E-A23E-c7000r5712-170315-SKC devices allow remote attackers to discover Wi-Fi credentials via iso.3.6.1.4.1.4413.2.2.2.1.5.4.1.14.1.3.10001 and 1.3.6.1.4.1.4413.2.2.2.1.18.1.2.3.4.1.2.10001 SNMP requests.

Affected products

Technicolor Cwa0101 Firmware: cwa0101e-a23e-c7000r5712-170315-skc

References

https://misteralfa-hack.blogspot.com/2018/12/technicolor-passwords-wireless-via-snmp.html
https://misteralfa-hack.blogspot.com/2018/12/technicolor-passwords-wireless-via-snmp.html

Get alerted when CVE-2018-20440 or the next vulnerability affects your stack