← Retour aux CVEs

CVE-2020-9477

CRITICAL

9.8

Description

An issue was discovered on HUMAX HGA12R-02 BRGCAA 1.1.53 devices. A vulnerability in the authentication functionality in the web-based interface could allow an unauthenticated remote attacker to capture packets at the time of authentication and gain access to the cleartext password. An attacker could use this access to create a new user account or control the device.

Details CVE

Score CVSS v3.19.8

SeveriteCRITICAL

Vecteur CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Vecteur d'attaqueNETWORK

ComplexiteLOW

Privileges requisNONE

Interaction utilisateurNONE

Publie3/4/2020

Derniere modification11/21/2024

Sourcenvd

Observations honeypot0

Produits affectes

humaxdigital:hga12r-02humaxdigital:hga12r-02_firmware

Faiblesses (CWE)

CWE-319

References

https://medium.com/%40rsantos_14778/info-disclosure-cve-2020-9477-29d0ca48d4fa(cve@mitre.org)

https://uk.humaxdigital.com/network/hga12r-02/(cve@mitre.org)

https://medium.com/%40rsantos_14778/info-disclosure-cve-2020-9477-29d0ca48d4fa(af854a3a-2127-422b-91ae-364da2661108)

https://uk.humaxdigital.com/network/hga12r-02/(af854a3a-2127-422b-91ae-364da2661108)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.