CVE Feed

    Dashboard / CVE / CVE-2018-20512

    CVE-2018-20512

    EPON CPE-WiFi devices 2.0.4-X000 are vulnerable to escalation of privileges by sending cooLogin=1, cooUser=admin, and timestamp=-1 cookies.

    Published:Jan 3, 2019
    Last Modified:Nov 21, 2024
    EPS:Jan 3, 2019
    EPSS Score:0.00715
    CVSS Score:9.8

    Affected Products

    Vendor
    Cdatatec
    Product
    Epon Cpe-wifi Devices Firmware
    Vendor
    Cdatatec
    Product
    Fd108bn
    Vendor
    Cdatatec
    Product
    Fd111hz
    Vendor
    Cdatatec
    Product
    Fd111y
    Vendor
    Cdatatec
    Product
    Fd114y
    Vendor
    Cdatatec
    Product
    Fd212gw
    Vendor
    Cdatatec
    Product
    Fd212h
    Vendor
    Cdatatec
    Product
    Fd214gh
    Vendor
    Cdatatec
    Product
    Fd214gw
    Vendor
    Cdatatec
    Product
    Fd404gh
    Vendor
    Cdatatec
    Product
    Fd404gw
    Vendor
    Cdatatec
    Product
    Fd600-104
    Vendor
    Cdatatec
    Product
    Fd600-104g
    Vendor
    Cdatatec
    Product
    Fd600-108f-hz500
    Vendor
    Cdatatec
    Product
    Fd600-111g
    Vendor
    Cdatatec
    Product
    Fd600-111gw
    Vendor
    Cdatatec
    Product
    Fd600-301
    Vendor
    Cdatatec
    Product
    Fd600-301gw
    Vendor
    Cdatatec
    Product
    Fd600-304
    Vendor
    Cdatatec
    Product
    Fd600-304ga-hr500
    Vendor
    Cdatatec
    Product
    Fd600-304ga-hr511
    Vendor
    Cdatatec
    Product
    Fd600-521g

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High