CVE-2018-20377

CVE-2018-20377 describes a critical vulnerability in Orange Livebox 00.96.320S devices, specifically affecting the Arcadyan ARV7519RW22-A-L T VR9 1.2 hardware. This flaw allows remote attackers to easily retrieve Wi-Fi credentials via an unauthenticated request to /get_getnetworkconf.cgi on port 8080. With a CVSS score of 9.8 (CRITICAL), the vulnerability has a low attack complexity and requires no user interaction or privileges, potentially leading to full system compromise if the admin password matches the Wi-Fi password or is the default. While there is no evidence of active exploitation in the KEV catalog or public exploit frameworks like Metasploit, the vulnerability has garnered significant community discussion and media coverage, indicating awareness and potential for future exploitation.