← Back to CVEs

CVE-2020-9477

CRITICAL

9.8

Description

An issue was discovered on HUMAX HGA12R-02 BRGCAA 1.1.53 devices. A vulnerability in the authentication functionality in the web-based interface could allow an unauthenticated remote attacker to capture packets at the time of authentication and gain access to the cleartext password. An attacker could use this access to create a new user account or control the device.

CVE Details

CVSS v3.1 Score9.8

SeverityCRITICAL

CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack VectorNETWORK

ComplexityLOW

Privileges RequiredNONE

User InteractionNONE

Published3/4/2020

Last Modified11/21/2024

Sourcenvd

Honeypot Sightings0

Affected Products

humaxdigital:hga12r-02humaxdigital:hga12r-02_firmware

Weaknesses (CWE)

CWE-319

References

https://medium.com/%40rsantos_14778/info-disclosure-cve-2020-9477-29d0ca48d4fa(cve@mitre.org)

https://uk.humaxdigital.com/network/hga12r-02/(cve@mitre.org)

https://medium.com/%40rsantos_14778/info-disclosure-cve-2020-9477-29d0ca48d4fa(af854a3a-2127-422b-91ae-364da2661108)

https://uk.humaxdigital.com/network/hga12r-02/(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.