Security readout for executives and security teams
Plain-English summary
This CVE describes Wi-Fi password disclosure on two D-Link cable modem/router firmware versions through SNMP. If an attacker can query the device over SNMP, they may be able to read wireless credentials without logging into the web interface.
Executive priority
Treat this as a targeted credential-exposure issue. Prioritize environments still using the named legacy D-Link devices, especially where SNMP could be reached outside a trusted management network. Replacement may be more practical than waiting for unclear vendor support.
Technical view
CVE-2018-20445 affects D-Link DCM-604 DCM604_C1_ViaCabo_1.04_20130606 and DCM-704 EU_DCM-704_1.10. The CVE states that remote attackers can discover Wi-Fi credentials through specific SNMP requests. The public data does not include CVSS, CWE, vendor advisory, or patch details.
Likely exposure
Exposure is likely limited to the named D-Link DCM-604 and DCM-704 firmware builds when SNMP is enabled and reachable from an attacker-controlled network path. The bundle does not support assuming other D-Link products are affected.
Exploitation context
No CISA KEV listing or cited source confirms active exploitation. The referenced public write-up indicates the weakness is queryable through SNMP, so risk increases sharply if SNMP is exposed to WAN, ISP-side, guest, or untrusted LAN networks.
Researcher notes
The evidence is narrow: the CVE record names two firmware builds and credential discovery through SNMP OIDs. There is no CVSS vector, CWE mapping, patch reference, or confirmed exploitation in the provided bundle. Avoid broad product claims without additional vendor evidence.
Mitigation direction
- Identify any D-Link DCM-604 or DCM-704 devices and confirm firmware versions.
- Disable SNMP where it is not operationally required.
- Restrict SNMP access to trusted management networks only.
- Rotate Wi-Fi credentials if SNMP exposure may have occurred.
- Check D-Link or provider guidance for firmware fixes or replacement options.
Validation and detection
- Inventory devices for the exact affected model and firmware strings.
- Confirm SNMP is disabled or inaccessible from untrusted networks.
- Review firewall rules blocking external SNMP access to these devices.
- Check network logs for unexpected SNMP polling against affected devices.
- Verify wireless credentials were changed after any suspected exposure.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CVE-2018-20445 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- Unknown
- CVSS
- Not scored
- Known Exploited
- No
- Published
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
CVSS and timeline data
No CVSS vectors or timeline events were available in the normalized CVE source material.
Source materials
- CVE List V5 sourceCVE List V5
- https://misteralfa-hack.blogspot.com/2018/12/d-link-passwords-wireless-via-snmp.htmlCVE reference · x_refsource_MISC
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.