VULNERABILITY INTELLIGENCE

CVE-2020-9420

CVSS score6.5 MEDIUM

EPSS probability0.49%

CISA KEVNot currently listed

Published2022-12-14

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Description

The login password of the web administrative dashboard in Arcadyan Wifi routers VRV9506JAC23 is sent in cleartext, allowing an attacker to sniff and intercept traffic to learn the administrative credentials to the router.

Weakness classification

nvd@nist.gov: CWE-319
134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-319

Primary references

cve@mitre.org — Exploit, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory