CVE-2018-20386
CVSS v3
9.8
CRITICAL
EPSS Score
1.8 %
exploit probability, as of 2026-09-25
CISA KEV
No
known exploited
Exploitation
—
SSVC status
Description
ARRIS SBG6580-2 D30GW-SEAEAGLE-1.5.2.5-GA-00-NOSH devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.
Technical details
- Published
- 2018-12-23
Frequently asked questions
What is CVE-2018-20386?
ARRIS SBG6580-2 D30GW-SEAEAGLE-1.5.2.5-GA-00-NOSH devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.
Is CVE-2018-20386 actively exploited?
Active exploitation of CVE-2018-20386 has not been confirmed. Its EPSS score was 1.8% on 2026-09-25, the estimated probability of exploitation in the next 30 days.
What is the CVSS score for CVE-2018-20386?
CVE-2018-20386 has a CVSS v3 base score of 9.8 (CRITICAL severity).
Is CVE-2018-20386 affecting your environment?
Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.
No credit card required · 500 free checks/month · Free API key
Other 2018 vulnerabilities worth triaging
Ranked by exploit probability (EPSS).