CVE-2018-20512
Summary
| CVE | CVE-2018-20512 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2019-01-03 19:29:00 UTC |
| Updated | 2019-10-03 00:03:00 UTC |
| Description | EPON CPE-WiFi devices 2.0.4-X000 are vulnerable to escalation of privileges by sending cooLogin=1, cooUser=admin, and timestamp=-1 cookies. |
Risk And Classification
Problem Types: CWE-565
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Operating System | Cdatatec | Epon Cpe-wifi Devices Firmware | 2.0.4-x000 | All | All | All |
| Operating System | Cdatatec | Epon Cpe-wifi Devices Firmware | 2.0.4-x000 | All | All | All |
| Hardware | Cdatatec | Fd108bn | - | All | All | All |
| Hardware | Cdatatec | Fd108bn | - | All | All | All |
| Hardware | Cdatatec | Fd111hz | - | All | All | All |
| Hardware | Cdatatec | Fd111hz | - | All | All | All |
| Hardware | Cdatatec | Fd111y | - | All | All | All |
| Hardware | Cdatatec | Fd111y | - | All | All | All |
| Hardware | Cdatatec | Fd114y | - | All | All | All |
| Hardware | Cdatatec | Fd114y | - | All | All | All |
| Hardware | Cdatatec | Fd212gw | - | All | All | All |
| Hardware | Cdatatec | Fd212gw | - | All | All | All |
| Hardware | Cdatatec | Fd212h | - | All | All | All |
| Hardware | Cdatatec | Fd212h | - | All | All | All |
| Hardware | Cdatatec | Fd214gh | - | All | All | All |
| Hardware | Cdatatec | Fd214gh | - | All | All | All |
| Hardware | Cdatatec | Fd214gw | - | All | All | All |
| Hardware | Cdatatec | Fd214gw | - | All | All | All |
| Hardware | Cdatatec | Fd404gh | - | All | All | All |
| Hardware | Cdatatec | Fd404gh | - | All | All | All |
| Hardware | Cdatatec | Fd404gw | - | All | All | All |
| Hardware | Cdatatec | Fd404gw | - | All | All | All |
| Hardware | Cdatatec | Fd600-104 | - | All | All | All |
| Hardware | Cdatatec | Fd600-104 | - | All | All | All |
| Hardware | Cdatatec | Fd600-104g | - | All | All | All |
| Hardware | Cdatatec | Fd600-104g | - | All | All | All |
| Hardware | Cdatatec | Fd600-108f-hz500 | - | All | All | All |
| Hardware | Cdatatec | Fd600-108f-hz500 | - | All | All | All |
| Hardware | Cdatatec | Fd600-111g | - | All | All | All |
| Hardware | Cdatatec | Fd600-111g | - | All | All | All |
| Hardware | Cdatatec | Fd600-111gw | - | All | All | All |
| Hardware | Cdatatec | Fd600-111gw | - | All | All | All |
| Hardware | Cdatatec | Fd600-301 | - | All | All | All |
| Hardware | Cdatatec | Fd600-301 | - | All | All | All |
| Hardware | Cdatatec | Fd600-301gw | - | All | All | All |
| Hardware | Cdatatec | Fd600-301gw | - | All | All | All |
| Hardware | Cdatatec | Fd600-304 | - | All | All | All |
| Hardware | Cdatatec | Fd600-304 | - | All | All | All |
| Hardware | Cdatatec | Fd600-304ga-hr500 | - | All | All | All |
| Hardware | Cdatatec | Fd600-304ga-hr500 | - | All | All | All |
| Hardware | Cdatatec | Fd600-304ga-hr511 | - | All | All | All |
| Hardware | Cdatatec | Fd600-304ga-hr511 | - | All | All | All |
| Hardware | Cdatatec | Fd600-521g | - | All | All | All |
| Hardware | Cdatatec | Fd600-521g | - | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Vulnerability in C-Data Technologies EPON CPE-WiFi devices firmware v2.0.4-x000 : networking | MISC | www.reddit.com | Exploit, Third Party Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.