CVE-2018-20377
CRITICAL
9,8
Source: [email protected]
Attack Vector: network
Attack Complexity: low
Privileges Required: none
User Interaction: none
Scope: unchanged
Confidentiality: high
Integrity: high
Availability: high
HIGH
10,0
Source: [email protected]
Access Vector: network
Access Complexity: low
Authentication: none
Confidentiality: complete
Integrity: complete
Availability: complete
Description
AI Translation Available
Orange Livebox 00.96.320S devices allow remote attackers to discover Wi-Fi credentials via /get_getnetworkconf.cgi on port 8080, leading to full control if the admin password equals the Wi-Fi password or has the default admin value. This is related to Firmware 01.11.2017-11:43:44, Boot v0.70.03, Modem 5.4.1.10.1.1A, Hardware 02, and Arcadyan ARV7519RW22-A-L T VR9 1.2.
EPSS (Exploit Prediction Scoring System)
Trend Analysis
EPSS (Exploit Prediction Scoring System)
Prevede la probabilità di sfruttamento basata su intelligence sulle minacce e sulle caratteristiche della vulnerabilità.
EPSS Score
0,3712
Percentile
1,0th
Updated
EPSS Score Trend (Last 90 Days)
Operating System
Arv7519Rw22 Livebox 2.1 Firmware by Orange
CPE Identifier
View Detailed Analysis
cpe:2.3:o:orange:arv7519rw22_livebox_2.1_firmware:00.96.217:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System
Arv7519Rw22 Livebox 2.1 Firmware by Orange
CPE Identifier
View Detailed Analysis
cpe:2.3:o:orange:arv7519rw22_livebox_2.1_firmware:00.96.00.96.609es:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System
Arv7519Rw22 Livebox 2.1 Firmware by Orange
CPE Identifier
View Detailed Analysis
cpe:2.3:o:orange:arv7519rw22_livebox_2.1_firmware:00.96.321s:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System
Arv7519Rw22 Livebox 2.1 Firmware by Orange
CPE Identifier
View Detailed Analysis
cpe:2.3:o:orange:arv7519rw22_livebox_2.1_firmware:00.96.00.96.613:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
https://badpackets.net/over-19000-orange-livebox-adsl-modems-are-leaking-their-…
https://github.com/zadewg/LIVEBOX-0DAY
https://news.ycombinator.com/item?id=18745533
https://web.archive.org/web/20181223120225/https://badpackets.net/over-19000-or…
https://badpackets.net/over-19000-orange-livebox-adsl-modems-are-leaking-their-…
https://github.com/zadewg/LIVEBOX-0DAY
https://news.ycombinator.com/item?id=18745533
https://web.archive.org/web/20181223120225/https://badpackets.net/over-19000-or…