CVE-2018-20393: Technicolor CGA0101 Firmware

Critical severity, CVSS 9.8. EPSS: 1.6% chance of exploitation in the next 30 days.

Technicolor CGA0111 CGA0111E-ES-13-E23E-c8000r5712-170217-0829-TRU, CWA0101 CWA0101E-A23E-c7000r5712-170315-SKC, DPC3928SL D3928SL-PSIP-13-A010-c3420r55105-170214a, TC7110.AR STD3.38.03, TC7110.B STC8.62.02, TC7110.D STDB.79.02, TC7200.d1I TC7200.d1IE-N23E-c7000r5712-170406-HAT, and TC7200.TH2v2 SC05.00.22 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.

Affected products

• Technicolor CGA0101 Firmware: version cwa0101e-a23e-c7000r5712-170315-skc only
• Technicolor CGA0111 Firmware: version cga0111e-es-13-e23e-c8000r5712-170217-0829-tru only
• Technicolor DPC3928SL Firmware: version d3928sl-psip-13-a010-c3420r55105-170214a only
• Technicolor TC7110.AR Firmware: version std3.38.03 only
• Technicolor TC7110.B Firmware: version stc8.62.02 only
• Technicolor TC7110.D Firmware: version stdb.79.02 only
• Technicolor TC7200.D1I Firmware: version tc7200.d1ie-n23e-c7000r5712-170406-hat only
• Technicolor TC7200.TH2V2.D1I Firmware: version sc05.00.22 only

Published 2018-12-23. Last modified 2026-06-17.