CVE-2018-20398

Name of the Vulnerable Software and Affected Versions Skyworth CM5100 version 1.1.0 Skyworth CM5100-440 version 1.2.1 Skyworth CM5100-511 version 4.1.0.14 Skyworth CM5100-GHD00 version 1.2.2 Skyworth CM5100.g2 version 4.1.0.17

Description The issue allows remote attackers to discover credentials via specific SNMP requests, including iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0.

Recommendations For Skyworth CM5100 version 1.1.0, update the device to a newer version that contains a fix for this issue. For Skyworth CM5100-440 version 1.2.1, update the device to a newer version that contains a fix for this issue. For Skyworth CM5100-511 version 4.1.0.14, update the device to a newer version that contains a fix for this issue. For Skyworth CM5100-GHD00 version 1.2.2, update the device to a newer version that contains a fix for this issue. For Skyworth CM5100.g2 version 4.1.0.17, update the device to a newer version that contains a fix for this issue. As a temporary workaround, consider restricting access to the SNMP service until a patch is available.