CVE:CVE-2018-20385
CNNVD:CNNVD-201812-1043
CastleNet CBV38Z4EC等都是CostleNet Technology公司的电缆调制解调器产品。
多款CastleNet产品中存在安全漏洞。远程攻击者可通过发送SNMP请求利用该漏洞获取凭证。以下产品和版本受到影响：CastleNet CBV38Z4EC 125.553mp1.39219mp1.899.007版本；CBV38Z4ECNIT 125.553mp1.39219mp1.899.005ITT版本；CBW383G4J 37.556mp5.008版本；CBW38G4J 37.553mp1.008版本。
solution:Upgrade castlenet cbv38z4ec_firmware to a higher version than 25.553mp1.39219mp1.899.007,and avoid the version 25.553mp1.39219mp1.899.007; Upgrade castlenet cbv38z4ecnit_firmware to a higher version than 125.553mp1.39219mp1.899.005itt,and avoid the version 125.553mp1.39219mp1.899.005itt; Upgrade castlenet cbw383g4j_firmware to a higher version than 37.556mp5.008,and avoid the version 37.556mp5.008; Upgrade castlenet cbw38g4j_firmware to a higher version than 37.553mp1.008,and avoid the version 37.553mp1.008