CVE-2018-20445
CRITICALDlink Dcm-604 Firmware - Insufficiently Protected Credentials
Title source: ruleDescription
D-Link DCM-604 DCM604_C1_ViaCabo_1.04_20130606 and DCM-704 EU_DCM-704_1.10 devices allow remote attackers to discover Wi-Fi credentials via iso.3.6.1.4.1.4413.2.2.2.1.5.4.1.14.1.3.32 and iso.3.6.1.4.1.4413.2.2.2.1.5.4.2.4.1.2.32 SNMP requests.
Scores
CVSS v3
9.8
EPSS
0.0055
EPSS Percentile
67.6%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Classification
CWE
CWE-522
Status
published
Affected Products (2)
dlink/dcm-604_firmware
dlink/dcm-704_firmware
Timeline
Published
Dec 25, 2018
Tracked Since
Feb 18, 2026