CVE-2018-20512
EPON CPE-WiFi devices 2.0.4-X000 are vulnerable to escalation of privileges by sending cooLogin=1, cooUser=admin, and timestamp=-1 cookies.
Published:Jan 3, 2019
Last Modified:Nov 21, 2024
EPS:Jan 3, 2019
EPSS Score:0.00715
CVSS Score:9.8
Affected Products
Vendor
Product
Action
Vendor
Cdatatec
Product
Epon Cpe-wifi Devices Firmware
Cdatatec
Epon Cpe-wifi Devices Firmware
Vendor
Cdatatec
Product
Fd108bn
Cdatatec
Fd108bn
Vendor
Cdatatec
Product
Fd111hz
Cdatatec
Fd111hz
Vendor
Cdatatec
Product
Fd111y
Cdatatec
Fd111y
Vendor
Cdatatec
Product
Fd114y
Cdatatec
Fd114y
Vendor
Cdatatec
Product
Fd212gw
Cdatatec
Fd212gw
Vendor
Cdatatec
Product
Fd212h
Cdatatec
Fd212h
Vendor
Cdatatec
Product
Fd214gh
Cdatatec
Fd214gh
Vendor
Cdatatec
Product
Fd214gw
Cdatatec
Fd214gw
Vendor
Cdatatec
Product
Fd404gh
Cdatatec
Fd404gh
Vendor
Cdatatec
Product
Fd404gw
Cdatatec
Fd404gw
Vendor
Cdatatec
Product
Fd600-104
Cdatatec
Fd600-104
Vendor
Cdatatec
Product
Fd600-104g
Cdatatec
Fd600-104g
Vendor
Cdatatec
Product
Fd600-108f-hz500
Cdatatec
Fd600-108f-hz500
Vendor
Cdatatec
Product
Fd600-111g
Cdatatec
Fd600-111g
Vendor
Cdatatec
Product
Fd600-111gw
Cdatatec
Fd600-111gw
Vendor
Cdatatec
Product
Fd600-301
Cdatatec
Fd600-301
Vendor
Cdatatec
Product
Fd600-301gw
Cdatatec
Fd600-301gw
Vendor
Cdatatec
Product
Fd600-304
Cdatatec
Fd600-304
Vendor
Cdatatec
Product
Fd600-304ga-hr500
Cdatatec
Fd600-304ga-hr500
Vendor
Cdatatec
Product
Fd600-304ga-hr511
Cdatatec
Fd600-304ga-hr511
Vendor
Cdatatec
Product
Fd600-521g
Cdatatec
Fd600-521g
Exploits
Common Weakness Enumeration
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
