CVE-2020-9477
Last modified
CVE-2020-9477 is a critical-severity vulnerability rated 9.8/10 on the CVSS scale. An issue was discovered on HUMAX HGA12R-02 BRGCAA 1.1.53 devices. A vulnerability in the authentication functionality in the web-based interface could allow an unauthenticated remote attacker to capture packets at the time of authentication and gain access to the cleartext password. EPSS estimates a 1.26% chance of exploitation in the next 30 days.
Description
An issue was discovered on HUMAX HGA12R-02 BRGCAA 1.1.53 devices. A vulnerability in the authentication functionality in the web-based interface could allow an unauthenticated remote attacker to capture packets at the time of authentication and gain access to the cleartext password. An attacker could use this access to create a new user account or control the device.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Humaxdigital | Hga12r-02 Firmware | brgcaa1.1.53 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2020-9477?
How severe is CVE-2020-9477?
How do I fix CVE-2020-9477?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2020
- CVE-2020-9471Umbraco Cloud 8.5.3 allows an authenticated file upload (and…8.8
- CVE-2020-9472Umbraco CMS 8.5.3 allows an authenticated file upload (and c…6.5
- CVE-2020-9473The S. Siedle & Soehne SG 150-0 Smart Gateway before 1.2.4 h…6.6
- CVE-2020-9474The S. Siedle & Soehne SG 150-0 Smart Gateway before 1.2.4 a…8.8
- CVE-2020-9475The S. Siedle & Soehne SG 150-0 Smart Gateway before 1.2.4 a…7
- CVE-2020-9476ARRIS TG1692A devices allow remote attackers to discover the…7.5
- CVE-2020-9478An issue was discovered in Rubrik 5.0.3-2296. An OS command …8.8
- CVE-2020-9479When loading a UDF, a specially crafted zip file could allow…5.5
- CVE-2020-9480In Apache Spark 2.4.5 and earlier, a standalone resource man…9.8
- CVE-2020-9481Apache ATS 6.0.0 to 6.2.3, 7.0.0 to 7.1.9, and 8.0.0 to 8.0.…7.5
- CVE-2020-9482If NiFi Registry 0.1.0 to 0.5.0 uses an authentication mecha…6.5
- CVE-2020-9483**Resolved** When use H2/MySQL/TiDB as Apache SkyWalking sto…7.5
Are you affected by CVE-2020-9477?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST