CVE-2018-20398 - OpenCVE

Skyworth CM5100 V1.1.0, CM5100-440 V1.2.1, CM5100-511 4.1.0.14, CM5100-GHD00 V1.2.2, and CM5100.g2 4.1.0.17 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.

No CVSS v3.1

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact None

Availability Impact None

AV:N/AC:L/Au:N/C:P/I:N/A:N

Vendors & Products
CPE Configurations

Vendors	Products
Skyworthdigital	Cm5100-ghd00 Firmware Cm5100 Firmware Cm5100-511 Firmware Cm5100-440 Firmware Cm5100.g2 Firmware Cm5100.g2 Cm5100-ghd00 Cm5100 Cm5100-440 Cm5100-511

Configuration 1 [-]

AND

cpe:2.3:o:skyworthdigital:cm5100_firmware:1.1.0:*:*:*:*:*:*:*

cpe:2.3:h:skyworthdigital:cm5100:2.1:*:*:*:*:*:*:*

Configuration 2 [-]

AND

cpe:2.3:o:skyworthdigital:cm5100-440_firmware:1.2.1:*:*:*:*:*:*:*

cpe:2.3:h:skyworthdigital:cm5100-440:2.1:*:*:*:*:*:*:*

Configuration 3 [-]

AND

cpe:2.3:o:skyworthdigital:cm5100-511_firmware:4.1.0.14:*:*:*:*:*:*:*

cpe:2.3:h:skyworthdigital:cm5100-511:1.1:*:*:*:*:*:*:*

Configuration 4 [-]

AND

cpe:2.3:o:skyworthdigital:cm5100-ghd00_firmware:1.2.2:*:*:*:*:*:*:*

cpe:2.3:h:skyworthdigital:cm5100-ghd00:2.1:*:*:*:*:*:*:*

Configuration 5 [-]

AND

cpe:2.3:o:skyworthdigital:cm5100.g2_firmware:4.1.0.17:*:*:*:*:*:*:*

cpe:2.3:h:skyworthdigital:cm5100.g2:5.11:*:*:*:*:*:*:*

References

Link	Resource
https://github.com/ezelf/sensitivesOids/blob/master/oidpassswordleaks.csv	Third Party Advisory
https://misteralfa-hack.blogspot.com/2018/12/stringbleed-y-ahora-que-passwords-leaks.html	Exploit Third Party Advisory

History

No history.

MITRE Information

Status: PUBLISHED

Assigner: mitre

Published: 2022-10-03T16:22:06

Updated: 2022-10-03T16:22:06

Reserved: 2022-10-03T00:00:00

Link: CVE-2018-20398

JSON object: View

NVD Information

Status : Analyzed

Published: 2018-12-23T21:29:01.420

Modified: 2019-10-03T00:03:26.223

Link: CVE-2018-20398

JSON object: View

Redhat Information

No data.

CWE

CWE-522

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "descriptions": [{"lang": "en", "value": "Skyworth CM5100 V1.1.0, CM5100-440 V1.2.1, CM5100-511 4.1.0.14, CM5100-GHD00 V1.2.2, and CM5100.g2 4.1.0.17 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2022-10-03T16:22:06", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://github.com/ezelf/sensitivesOids/blob/master/oidpassswordleaks.csv"}, {"tags": ["x_refsource_MISC"], "url": "https://misteralfa-hack.blogspot.com/2018/12/stringbleed-y-ahora-que-passwords-leaks.html"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2018-20398", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Skyworth CM5100 V1.1.0, CM5100-440 V1.2.1, CM5100-511 4.1.0.14, CM5100-GHD00 V1.2.2, and CM5100.g2 4.1.0.17 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "https://github.com/ezelf/sensitivesOids/blob/master/oidpassswordleaks.csv", "refsource": "MISC", "url": "https://github.com/ezelf/sensitivesOids/blob/master/oidpassswordleaks.csv"}, {"name": "https://misteralfa-hack.blogspot.com/2018/12/stringbleed-y-ahora-que-passwords-leaks.html", "refsource": "MISC", "url": "https://misteralfa-hack.blogspot.com/2018/12/stringbleed-y-ahora-que-passwords-leaks.html"}]}}}}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2018-20398", "datePublished": "2022-10-03T16:22:06", "dateReserved": "2022-10-03T00:00:00", "dateUpdated": "2022-10-03T16:22:06", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.0"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:skyworthdigital:cm5100_firmware:1.1.0:*:*:*:*:*:*:*", "matchCriteriaId": "4ED4960D-4C69-4156-A19D-05DCE2202BD3", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:skyworthdigital:cm5100:2.1:*:*:*:*:*:*:*", "matchCriteriaId": "2AA03A19-E199-4293-B07A-E7368620B043", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:skyworthdigital:cm5100-440_firmware:1.2.1:*:*:*:*:*:*:*", "matchCriteriaId": "AB679D70-7113-4AA0-9C74-06AD1F13AF65", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:skyworthdigital:cm5100-440:2.1:*:*:*:*:*:*:*", "matchCriteriaId": "C0E45B7C-389E-4905-8ABE-8D6DA557089A", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:skyworthdigital:cm5100-511_firmware:4.1.0.14:*:*:*:*:*:*:*", "matchCriteriaId": "9702F235-8E5D-40D1-9750-4DEDCDD13600", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:skyworthdigital:cm5100-511:1.1:*:*:*:*:*:*:*", "matchCriteriaId": "0FF41D03-E8F0-4722-83E7-C49F08CE9174", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:skyworthdigital:cm5100-ghd00_firmware:1.2.2:*:*:*:*:*:*:*", "matchCriteriaId": "0EE9C3F6-9806-4568-9297-1385D0C91C8F", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:skyworthdigital:cm5100-ghd00:2.1:*:*:*:*:*:*:*", "matchCriteriaId": "D8920B9B-44C9-41E7-B39C-AD5C3398DB53", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:skyworthdigital:cm5100.g2_firmware:4.1.0.17:*:*:*:*:*:*:*", "matchCriteriaId": "D5546CD6-710D-457E-AC8E-09A0CEAC39E5", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:skyworthdigital:cm5100.g2:5.11:*:*:*:*:*:*:*", "matchCriteriaId": "C3F4984E-5628-4E03-8828-A1A0DCAA5A09", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "Skyworth CM5100 V1.1.0, CM5100-440 V1.2.1, CM5100-511 4.1.0.14, CM5100-GHD00 V1.2.2, and CM5100.g2 4.1.0.17 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests."}, {"lang": "es", "value": "Los dispositivos Skyworth CM5100 V1.1.0, CM5100-440 V1.2.1, CM5100-511 4.1.0.14, CM5100-GHD00 V1.2.2 y CM5100.g2 4.1.0.17 permiten que atacantes remotos descubran credenciales mediante peticiones SNMP iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 e iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0."}], "id": "CVE-2018-20398", "lastModified": "2019-10-03T00:03:26.223", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2018-12-23T21:29:01.420", "references": [{"source": "cve@mitre.org", "tags": ["Third Party Advisory"], "url": "https://github.com/ezelf/sensitivesOids/blob/master/oidpassswordleaks.csv"}, {"source": "cve@mitre.org", "tags": ["Exploit", "Third Party Advisory"], "url": "https://misteralfa-hack.blogspot.com/2018/12/stringbleed-y-ahora-que-passwords-leaks.html"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-522"}], "source": "nvd@nist.gov", "type": "Primary"}]}