CVE-2018-20396 NET&SYS MNG2120J 5.76.1006c and MNG6300 5.83.6305jrc2 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests...
CriticalCVSS 9.8
EPSS 1.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
NET&SYS MNG2120J 5.76.1006c and MNG6300 5.83.6305jrc2 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| telaum ming2120j firmware | = 5.76.1006c | No fix listed |
| telaum ming6300 firmware | = 5.83.6305jrc2 | No fix listed |
References
- github.com third-party-advisory
- misteralfa-hack.blogspot.com exploit third-party-advisory