CVE-2018-20440

CRITICAL

Technicolor Cwa0101 Firmware - Insufficiently Protected Credentials

Title source: rule

Description

Technicolor CWA0101 CWA0101E-A23E-c7000r5712-170315-SKC devices allow remote attackers to discover Wi-Fi credentials via iso.3.6.1.4.1.4413.2.2.2.1.5.4.1.14.1.3.10001 and 1.3.6.1.4.1.4413.2.2.2.1.18.1.2.3.4.1.2.10001 SNMP requests.

References (1)

[Exploit, Third Party Advisory] https://misteralfa-hack.blogspot.com/2018/12/technicolor-passwords-wireless-via-snmp.html

Scores

CVSS v3 9.8

EPSS 0.0047

EPSS Percentile 64.5%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Classification

CWE

CWE-522

Status published

Affected Products (1)

technicolor/cwa0101_firmware

Timeline

Published Dec 25, 2018

Tracked Since Feb 18, 2026