[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f8HHNrrKWkupjlJPDP8hDstCM1FRtffFqoVA74h1KxBo":3,"g5a-risk:CVE-2018-20383":138},{"success":4,"data":5,"meta":136},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":40,"epssPercentile":27,"epssTimeSeries":41,"severity":42,"affectedProducts":43,"affectedProductsCount":61,"references":62,"referencesCount":73,"weaknesses":74,"weaknessesCount":83,"isActivelyExploited":84,"cisaInfo":27,"otxData":27,"relatedBlogPosts":85,"seoMetadata":86,"configurations":111,"relatedVendorCves":134,"notableEvents":135},"CVE-2018-20383","What is CVE-2018-20383?","ARRIS DG950A 7.10.145 and DG950S 7.10.145.EURO devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.","ARRIS DG950A 7.10.145 and DG950S 7.10.145.EURO devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4....","2018-12-23T21:29:00.483","2021-09-13T11:36:14.017",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":27,"CVSSMetricV2":30,"CVSSMetricV40":27},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":25,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",null,3.9,5.9,[31],{"Source":17,"Type":18,"CVSSData":32,"BaseSeverity":37,"ExploitabilityScore":38,"ImpactScore":39,"ACInsufInfo":27,"ObtainAllPrivilege":27,"ObtainUserPrivilege":27,"ObtainOtherPrivilege":27,"UserInteractionRequired":27},{"Version":33,"VectorString":34,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":35,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":36,"BaseSeverity":27,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:N\u002FA:N","PARTIAL",5,"MEDIUM",10,2.9,0.01823,[40,40,40,40,40,40,40],"Critical",[44,49,53,58],{"vendor":45,"product":46,"version":47,"criteria":48,"vulnerable":4},"commscope","arris_dg950a_firmware","7.10.145","cpe:2.3:o:commscope:arris_dg950a_firmware:7.10.145:*:*:*:*:*:*:*",{"vendor":45,"product":50,"version":51,"criteria":52,"vulnerable":4},"arris_dg950a","3.0","cpe:2.3:o:commscope:arris_dg950a:3.0:*:*:*:*:*:*:*",{"vendor":54,"product":55,"version":56,"criteria":57,"vulnerable":4},"arris","dg950s_firmware","7.10.145.euro","cpe:2.3:o:arris:dg950s_firmware:7.10.145.euro:*:*:*:*:*:*:*",{"vendor":45,"product":59,"version":51,"criteria":60,"vulnerable":4},"arris_dg950s","cpe:2.3:h:commscope:arris_dg950s:3.0:*:*:*:*:*:*:*",4,[63,68],{"url":64,"source":65,"tags":66},"https:\u002F\u002Fgithub.com\u002Fezelf\u002FsensitivesOids\u002Fblob\u002Fmaster\u002Foidpassswordleaks.csv","GitHub",[67],"Third Party Advisory",{"url":69,"source":70,"tags":71},"https:\u002F\u002Fmisteralfa-hack.blogspot.com\u002F2018\u002F12\u002Fstringbleed-y-ahora-que-passwords-leaks.html","Blogspot",[72,67],"Exploit",2,[75],{"id":76,"name":77,"description":78,"extendedDescription":79,"status":80,"abstraction":81,"structure":82},"CWE-522","Insufficiently Protected Credentials","The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and\u002For retrieval.","","Incomplete","Class","Simple",1,false,[],{"title":87,"metaDescription":88,"keywords":89,"canonicalUrl":90,"structuredData":91},"What is CVE-2018-20383? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2018-20383, a critical severity cyber security vulnerability from 2018. ARRIS DG950A 7.10.145 and DG950S 7.10.145.EURO devices ...","CVE-2018-20383, CVE-2018-20383 vulnerability, CVE-2018-20383 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2018, CVSS score, exploit, patch, remediation, commscope security, arris security, arris_dg950a_firmware vulnerability, arris_dg950a vulnerability, dg950s_firmware vulnerability, arris_dg950s vulnerability","\u002Fwhat-is\u002Fcve-2018-20383",{"@context":92,"@type":93,"headline":87,"description":88,"datePublished":10,"dateModified":11,"author":94,"publisher":98,"about":102,"mainEntityOfPage":106,"articleSection":109,"keywords":110},"https:\u002F\u002Fschema.org","TechArticle",{"@type":95,"name":96,"url":97},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":95,"name":96,"url":97,"logo":99},{"@type":100,"url":101},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":103,"name":6,"description":104,"additionalType":105},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":107,"@id":108},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2018-20383","Cybersecurity","CVE-2018-20383, CVE-2018-20383 vulnerability, CVE-2018-20383 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[112,124],{"Operator":113,"Negate":27,"Nodes":114},"AND",[115,120],{"Operator":116,"Negate":27,"CPEMatch":117},"OR",[118],{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":119,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"FE85035D-E3B0-45B5-B6F6-6448740E46FF",{"Operator":116,"Negate":27,"CPEMatch":121},[122],{"Vulnerable":27,"Criteria":52,"MatchCriteriaID":123,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"994B3FF2-CFA2-4632-AA46-7AB82B6B00F9",{"Operator":113,"Negate":27,"Nodes":125},[126,130],{"Operator":116,"Negate":27,"CPEMatch":127},[128],{"Vulnerable":4,"Criteria":57,"MatchCriteriaID":129,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"3751EB27-51F5-41E2-BE1E-F07EB1E14DA9",{"Operator":116,"Negate":27,"CPEMatch":131},[132],{"Vulnerable":27,"Criteria":60,"MatchCriteriaID":133,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"C343A693-611C-4BC7-B9C3-78A883225093",[],[],{"lastModified":11,"cacheTime":137,"version":33},1792385893985,{"score":139,"band":140,"action":141,"scoredAt":142},54,"Medium","Plan remediation","2026-10-16T06:45:18.310366+00:00"]