← Back
CWE-522

1,396 CVEs • Abstraction: Class

Insufficiently Protected Credentials

The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.

JSON object

Loading...

CVEs (1,396)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2018-20400
1Ubeeinteractive
2Dvw2108 Firmware
Dvw2110 Firmware
Nov 21, 2024
Dec 23, 2018
N/A· v4
9.8 CRITICAL· v3
5.0 MEDIUM· v2
Ubee DVW2108 6.28.1017 and DVW2110 6.28.2012 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.
CVE-2018-20399
1Motorola
3Sbg901 Firmware
Sbg941 FirmwareSvg1202 Firmware
Nov 21, 2024
Dec 23, 2018
N/A· v4
9.8 CRITICAL· v3
5.0 MEDIUM· v2
Motorola SBG901 SBG901-2.10.1.1-GA-00-581-NOSH, SBG941 SBG941-2.11.0.0-GA-07-624-NOSH, and SVG1202 SVG1202-2.1.0.0-GA-14-LTSH devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0...Show more
Motorola SBG901 SBG901-2.10.1.1-GA-00-581-NOSH, SBG941 SBG941-2.11.0.0-GA-07-624-NOSH, and SVG1202 SVG1202-2.1.0.0-GA-14-LTSH devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.Show less
CVE-2018-20398
1Skyworthdigital
5Cm5100 440 Firmware
Cm5100 511 FirmwareCm5100 Ghd00 Firmware+2 more
Nov 21, 2024
Dec 23, 2018
N/A· v4
9.8 CRITICAL· v3
5.0 MEDIUM· v2
Skyworth CM5100 V1.1.0, CM5100-440 V1.2.1, CM5100-511 4.1.0.14, CM5100-GHD00 V1.2.2, and CM5100.g2 4.1.0.17 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1....Show more
Skyworth CM5100 V1.1.0, CM5100-440 V1.2.1, CM5100-511 4.1.0.14, CM5100-GHD00 V1.2.2, and CM5100.g2 4.1.0.17 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.Show less
CVE-2018-20397
1Mplustec
1Cbc383z Firmware
Nov 21, 2024
Dec 23, 2018
N/A· v4
9.8 CRITICAL· v3
5.0 MEDIUM· v2
mplus CBC383Z CBC383Z_mplus_MDr026 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.
CVE-2018-20396
1Telaum
2Ming2120j Firmware
Ming6300 Firmware
Nov 21, 2024
Dec 23, 2018
N/A· v4
9.8 CRITICAL· v3
5.0 MEDIUM· v2
NET&SYS MNG2120J 5.76.1006c and MNG6300 5.83.6305jrc2 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.
CVE-2018-20395
1Net Wave
1Ming6200 Firmware
Nov 21, 2024
Dec 23, 2018
N/A· v4
9.8 CRITICAL· v3
5.0 MEDIUM· v2
NETWAVE MNG6200 C4835805jrc12FU121413.cpr devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.
CVE-2018-20394
1Technicolor
4Dwg849 Firmware
Dwg850 4 FirmwareDwg855 Firmware+1 more
Nov 21, 2024
Dec 23, 2018
N/A· v4
9.8 CRITICAL· v3
5.0 MEDIUM· v2
Thomson DWG849 STC0.01.16, DWG850-4 ST9C.05.25, DWG855 ST80.20.26, and TWG870 STB2.01.36 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2....Show more
Thomson DWG849 STC0.01.16, DWG850-4 ST9C.05.25, DWG855 ST80.20.26, and TWG870 STB2.01.36 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.Show less
CVE-2018-20392
1Cisco
1Dpc2100 Firmware
Nov 21, 2024
Dec 23, 2018
N/A· v4
9.8 CRITICAL· v3
5.0 MEDIUM· v2
S-A WebSTAR DPC2100 v2.0.2r1256-060303 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.
CVE-2018-20391
1Teknotel
1Cbw700n Firmware
Nov 21, 2024
Dec 23, 2018
N/A· v4
9.8 CRITICAL· v3
5.0 MEDIUM· v2
TEKNOTEL CBW700N 81.447.392110.729.024 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.
CVE-2018-20390
1Kaonmedia
3Cg2001 An22a Firmware
Cg2001 Udbna FirmwareCg2001 Un2na Firmware
Nov 21, 2024
Dec 23, 2018
N/A· v4
9.8 CRITICAL· v3
5.0 MEDIUM· v2
Kaonmedia CG2001-AN22A 1.2.1, CG2001-UDBNA 3.0.8, and CG2001-UN2NA 3.0.8 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.
CVE-2018-20389
1D Link
2Dcm 604 Firmware
Dcm 704 Firmware
Nov 21, 2024
Dec 23, 2018
N/A· v4
9.8 CRITICAL· v3
5.0 MEDIUM· v2
D-Link DCM-604 DCM604_C1_ViaCabo_1.04_20130606 and DCM-704 EU_DCM-704_1.10 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP request...Show more
D-Link DCM-604 DCM604_C1_ViaCabo_1.04_20130606 and DCM-704 EU_DCM-704_1.10 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.Show less
CVE-2018-20388
1Comtrend
2Cm 6200un Firmware
Cm 6300n Firmware
Nov 21, 2024
Dec 23, 2018
N/A· v4
9.8 CRITICAL· v3
5.0 MEDIUM· v2
Comtrend CM-6200un 123.447.007 and CM-6300n 123.553mp1.005 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.
CVE-2018-20387
1Bnmux
3Bcw700j Firmware
Bcw710j2 FirmwareBcw710j Firmware
Nov 21, 2024
Dec 23, 2018
N/A· v4
9.8 CRITICAL· v3
5.0 MEDIUM· v2
Bnmux BCW700J 5.20.7, BCW710J 5.30.6a, and BCW710J2 5.30.16 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.
CVE-2018-20386
1Commscope
1Arris Sbg6580 2 Firmware
Nov 21, 2024
Dec 23, 2018
N/A· v4
9.8 CRITICAL· v3
5.0 MEDIUM· v2
ARRIS SBG6580-2 D30GW-SEAEAGLE-1.5.2.5-GA-00-NOSH devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.
CVE-2018-20385
1Castlenet
4Cbv38z4ec Firmware
Cbv38z4ecnit FirmwareCbw383g4j Firmware+1 more
Nov 21, 2024
Dec 23, 2018
N/A· v4
9.8 CRITICAL· v3
5.0 MEDIUM· v2
CastleNet CBV38Z4EC 125.553mp1.39219mp1.899.007, CBV38Z4ECNIT 125.553mp1.39219mp1.899.005ITT, CBW383G4J 37.556mp5.008, and CBW38G4J 37.553mp1.008 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4...Show more
CastleNet CBV38Z4EC 125.553mp1.39219mp1.899.007, CBV38Z4ECNIT 125.553mp1.39219mp1.899.005ITT, CBW383G4J 37.556mp5.008, and CBW38G4J 37.553mp1.008 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.Show less
CVE-2018-20384
1Inovobb
2Ib 8120 W21 Firmware
Ib 8120 W21e1 Firmware
Nov 21, 2024
Dec 23, 2018
N/A· v4
9.8 CRITICAL· v3
5.0 MEDIUM· v2
iNovo Broadband IB-8120-W21 139.4410mp1.004200.002 and IB-8120-W21E1 139.4410mp1.3921132mp1.899.004404.004 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4...Show more
iNovo Broadband IB-8120-W21 139.4410mp1.004200.002 and IB-8120-W21E1 139.4410mp1.3921132mp1.899.004404.004 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.Show less
CVE-2018-20383
2Arris
Commscope
2Arris Dg950a Firmware
Dg950s Firmware
Nov 21, 2024
Dec 23, 2018
N/A· v4
9.8 CRITICAL· v3
5.0 MEDIUM· v2
ARRIS DG950A 7.10.145 and DG950S 7.10.145.EURO devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.
CVE-2018-20382
1Jezetek Intl
1Bcm93383wrg Firmware
Nov 21, 2024
Dec 23, 2018
N/A· v4
9.8 CRITICAL· v3
5.0 MEDIUM· v2
Jiuzhou BCM93383WRG 139.4410mp1.3921132mp1.899.004404.004 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.
CVE-2018-17245
1Elastic
1Kibana
Nov 21, 2024
Dec 20, 2018
N/A· v4
9.8 CRITICAL· v3
5.0 MEDIUM· v2
Kibana versions 4.0 to 4.6, 5.0 to 5.6.12, and 6.0 to 6.4.2 contain an error in the way authorization credentials are used when generating PDF reports. If a report requests external resources plaintext credentials are in...Show more
Kibana versions 4.0 to 4.6, 5.0 to 5.6.12, and 6.0 to 6.4.2 contain an error in the way authorization credentials are used when generating PDF reports. If a report requests external resources plaintext credentials are included in the HTTP request that could be recovered by an external resource provider.Show less
CVE-2018-1000851
1Copay
1Copay Bitcoin Wallet
Nov 21, 2024
Dec 20, 2018
N/A· v4
9.8 CRITICAL· v3
5.0 MEDIUM· v2
Copay Bitcoin Wallet version 5.01 to 5.1.0 included. contains a Other/Unknown vulnerability in wallet private key storage that can result in Users' private key can be compromised. . This attack appear to be exploitable v...Show more
Copay Bitcoin Wallet version 5.01 to 5.1.0 included. contains a Other/Unknown vulnerability in wallet private key storage that can result in Users' private key can be compromised. . This attack appear to be exploitable via Affected version run the malicious code at startup . This vulnerability appears to have been fixed in 5.2.0 and later .Show less