TI-2018-14446 Aliases CVE-2018-20393 GHSA-wm77-vmvx-w6c9

Technicolor CGA0111 CGA0111E-ES-13-E23E-c8000r5712-170217-0829-TRU, CWA0101…

MEDIUM 45Published 2018-12-23 · Updated 2024-09-16

Key facts

Attack vector: Network
Privileges required: None
User interaction: None
Attack complexity: Low
Impact type: —
Confidentiality · integrity · availability: High · High · High
Fix status: No fix listed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA.

Summary

Technicolor CGA0111 CGA0111E-ES-13-E23E-c8000r5712-170217-0829-TRU, CWA0101 CWA0101E-A23E-c7000r5712-170315-SKC, DPC3928SL D3928SL-PSIP-13-A010-c3420r55105-170214a, TC7110.AR STD3.38.03, TC7110.B STC8.62.02, TC7110.D STDB.79.02, TC7200.d1I TC7200.d1IE-N23E-c7000r5712-170406-HAT, and TC7200.TH2v2 SC05.00.22 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.

Why it matters now

EPSS 0.01596 75th percentileScored 2026-11-07

Public exploit Yes 1 exploit referenceTagged by NVD

Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
—	—	all versions	—	No fix listed	CNA

— Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 16

CPE	Versions	Role	Vendor
cpe:2.3:o:technicolor:cga0111_firmware:cga0111e-es-13-e23e-c8000r5712-170217-0829-tru:::::::*	cga0111e-es-13-e23e-c8000r5712-170217-0829-tru	Vulnerable	Technicolor
cpe:2.3:h:technicolor:cga0111:1.0:::::::*	1.0	Running on	Technicolor
cpe:2.3:o:technicolor:cga0101_firmware:cwa0101e-a23e-c7000r5712-170315-skc:::::::*	cwa0101e-a23e-c7000r5712-170315-skc	Vulnerable	Technicolor
cpe:2.3:h:technicolor:cga0101:1.0:::::::*	1.0	Running on	Technicolor
cpe:2.3:o:technicolor:dpc3928sl_firmware:d3928sl-psip-13-a010-c3420r55105-170214a:::::::*	d3928sl-psip-13-a010-c3420r55105-170214a	Vulnerable	Technicolor
cpe:2.3:h:technicolor:dpc3928sl:1.0:::::::*	1.0	Running on	Technicolor
cpe:2.3:o:technicolor:tc7110.ar_firmware:std3.38.03:::::::*	std3.38.03	Vulnerable	Technicolor
cpe:2.3:h:technicolor:tc7110.ar:1.0:::::::*	1.0	Running on	Technicolor
cpe:2.3:o:technicolor:tc7110.b_firmware:stc8.62.02:::::::*	stc8.62.02	Vulnerable	Technicolor
cpe:2.3:h:technicolor:tc7110.b:2.0:::::::*	2.0	Running on	Technicolor

cpe:2.3:o:technicolor:cga0111_firmware:cga0111e-es-13-e23e-c8000r5712-170217-0829-tru:*:*:*:*:*:*:* Versions cga0111e-es-13-e23e-c8000r5712-170217-0829-tru Vulnerable ·Technicolor
cpe:2.3:h:technicolor:cga0111:1.0:*:*:*:*:*:*:* Versions 1.0 Running on ·Technicolor
cpe:2.3:o:technicolor:cga0101_firmware:cwa0101e-a23e-c7000r5712-170315-skc:*:*:*:*:*:*:* Versions cwa0101e-a23e-c7000r5712-170315-skc Vulnerable ·Technicolor
cpe:2.3:h:technicolor:cga0101:1.0:*:*:*:*:*:*:* Versions 1.0 Running on ·Technicolor
cpe:2.3:o:technicolor:dpc3928sl_firmware:d3928sl-psip-13-a010-c3420r55105-170214a:*:*:*:*:*:*:* Versions d3928sl-psip-13-a010-c3420r55105-170214a Vulnerable ·Technicolor
cpe:2.3:h:technicolor:dpc3928sl:1.0:*:*:*:*:*:*:* Versions 1.0 Running on ·Technicolor
cpe:2.3:o:technicolor:tc7110.ar_firmware:std3.38.03:*:*:*:*:*:*:* Versions std3.38.03 Vulnerable ·Technicolor
cpe:2.3:h:technicolor:tc7110.ar:1.0:*:*:*:*:*:*:* Versions 1.0 Running on ·Technicolor
cpe:2.3:o:technicolor:tc7110.b_firmware:stc8.62.02:*:*:*:*:*:*:* Versions stc8.62.02 Vulnerable ·Technicolor
cpe:2.3:h:technicolor:tc7110.b:2.0:*:*:*:*:*:*:* Versions 2.0 Running on ·Technicolor

Show 6 more CPE

CPE	Versions	Role	Vendor
cpe:2.3:o:technicolor:tc7110.d_firmware:stdb.79.02:::::::*	stdb.79.02	Vulnerable	Technicolor
cpe:2.3:h:technicolor:tc7110.d:1.0:::::::*	1.0	Running on	Technicolor
cpe:2.3:o:technicolor:tc7200.d1i_firmware:tc7200.d1ie-n23e-c7000r5712-170406-hat:::::::*	tc7200.d1ie-n23e-c7000r5712-170406-hat	Vulnerable	Technicolor
cpe:2.3:h:technicolor:tc7200.d1i:1.0:::::::*	1.0	Running on	Technicolor
cpe:2.3:o:technicolor:tc7200.th2v2.d1i_firmware:sc05.00.22:::::::*	sc05.00.22	Vulnerable	Technicolor
cpe:2.3:h:technicolor:tc7200.th2v2.d1i:01.00:::::::*	01.00	Running on	Technicolor

cpe:2.3:o:technicolor:tc7110.d_firmware:stdb.79.02:*:*:*:*:*:*:* Versions stdb.79.02 Vulnerable ·Technicolor
cpe:2.3:h:technicolor:tc7110.d:1.0:*:*:*:*:*:*:* Versions 1.0 Running on ·Technicolor
cpe:2.3:o:technicolor:tc7200.d1i_firmware:tc7200.d1ie-n23e-c7000r5712-170406-hat:*:*:*:*:*:*:* Versions tc7200.d1ie-n23e-c7000r5712-170406-hat Vulnerable ·Technicolor
cpe:2.3:h:technicolor:tc7200.d1i:1.0:*:*:*:*:*:*:* Versions 1.0 Running on ·Technicolor
cpe:2.3:o:technicolor:tc7200.th2v2.d1i_firmware:sc05.00.22:*:*:*:*:*:*:* Versions sc05.00.22 Vulnerable ·Technicolor
cpe:2.3:h:technicolor:tc7200.th2v2.d1i:01.00:*:*:*:*:*:*:* Versions 01.00 Running on ·Technicolor

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2018-20393
2026-10-03 Alias added: GHSA-wm77-vmvx-w6c9

References

Exploit 1

https://misteralfa-hack.blogspot.com/2018/12/stringbleed-y-ahora-que-passwords-leaks.html

Advisory 1

https://github.com/ezelf/sensitivesOids/blob/master/oidpassswordleaks.csv

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences