CVE-2018-20380

Ambit DDW2600 5.100.1009, DDW2602 5.105.1003, T60C926 4.64.1012, and U10C019 5.66.1026 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
Affected Products (NVD)
VendorProductVersion
ubeeinteractiveambit_ddw2600_firmware
5.100.1009
ubeeinteractiveambit_ddw2602_firmware
5.105.1003
ubeeinteractiveambit_t60c926_firmware
4.64.1012
ubeeinteractiveambit_u10c019_firmware
5.66.1026
𝑥
= Vulnerable software versions
References
https://github.com/ezelf/sensitivesOids/blob/master/oidpassswordleaks.csv
https://misteralfa-hack.blogspot.com/2018/12/stringbleed-y-ahora-que-passwords-leaks.html
https://github.com/ezelf/sensitivesOids/blob/master/oidpassswordleaks.csv
https://misteralfa-hack.blogspot.com/2018/12/stringbleed-y-ahora-que-passwords-leaks.html