Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.8

Technicolor CGA0111 devices reveal Wi-Fi passwords to hackers

CVE-2018-20444 · published 7 years ago
Summary

Certain Technicolor CGA0111 devices leak their Wi-Fi login credentials to remote attackers through specific network requests. This vulnerability puts the security of your home or business network at risk. To protect your network, update your device to the latest software version or apply the recommended security patches.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
technicolor cga0111_firmware cga0111e-es-13-e23e-c8000r5712-170217-0829-tru
cpe:2.3:o:technicolor:cga0111_firmware:cga0111e-es-13-e23e-c8000r5712-170217-0829-tru:*:*:*:*:*:*:*
Original advisory text
Technicolor CGA0111 CGA0111E-ES-13-E23E-c8000r5712-170217-0829-TRU devices allow remote attackers to discover Wi-Fi credentials via iso.3.6.1.4.1.4413.2.2.2.1.5.4.1.14.1.3.10001 and 1.3.6.1.4.1.441...
Technicolor CGA0111 CGA0111E-ES-13-E23E-c8000r5712-170217-0829-TRU devices allow remote attackers to discover Wi-Fi credentials via iso.3.6.1.4.1.4413.2.2.2.1.5.4.1.14.1.3.10001 and 1.3.6.1.4.1.4413.2.2.2.1.18.1.2.3.4.1.2.10001 SNMP requests.
References
Fix within
Internet-facing 3 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker full control (estimated)
Severity
9.8 Critical
Exploitation
1% chance of attack within 30 days
Type
CWE-522Insufficiently Protected Credentials
Timeline
Published25 Dec 2018
Updated4 Nov 2026
First seen14 Mar 2026
Sources
CVE-2018-20444 · OSV
CVE-2018-20444 · NVD
Track software like this
Free during beta