CVE-2018-20399: Motorola SBG901 Firmware

Critical severity, CVSS 9.8. EPSS: 2.6% chance of exploitation in the next 30 days.

Motorola SBG901 SBG901-2.10.1.1-GA-00-581-NOSH, SBG941 SBG941-2.11.0.0-GA-07-624-NOSH, and SVG1202 SVG1202-2.1.0.0-GA-14-LTSH devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.

Affected products

• Motorola SBG901 Firmware: version sbg901-2.10.1.1-ga-00-581-nosh only
• Motorola SBG941 Firmware: version sbg941-2.11.0.0-ga-07-624-nosh only
• Motorola SVG1202 Firmware: version svg1202-2.1.0.0-ga-14-ltsh only

Published 2018-12-23. Last modified 2026-06-17.