CVE-2018-20386
CRITICALARRIS SBG6580-2 D30GW-SEAEAGLE-1.5.2.5-GA-00-NOSH - Unauthenticated Credential Exposure via SNMP OID Requests
Title source: llmDescription
ARRIS SBG6580-2 D30GW-SEAEAGLE-1.5.2.5-GA-00-NOSH devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.
References (2)
Core 2
Core References
Third Party Advisory x_refsource_misc
https://github.com/ezelf/sensitivesOids/blob/master/oidpassswordleaks.csv
Exploit, Third Party Advisory x_refsource_misc
https://misteralfa-hack.blogspot.com/2018/12/stringbleed-y-ahora-que-passwords-leaks.html
Scores
CVSS v3
9.8
EPSS
0.0182
EPSS Percentile
76.0%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-522
Status
published
Products (1)
commscope/arris_sbg6580-2_firmware
d30gw-seaeagle-1.5.2.5-ga-00-nosh
Published
Dec 23, 2018
Tracked Since
Feb 18, 2026