VULNERABILITY INTELLIGENCE

CVE-2020-9477

CVSS score9.8 CRITICAL
EPSS probability1.26%
CISA KEVNot currently listed
Published2020-03-04
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

An issue was discovered on HUMAX HGA12R-02 BRGCAA 1.1.53 devices. A vulnerability in the authentication functionality in the web-based interface could allow an unauthenticated remote attacker to capture packets at the time of authentication and gain access to the cleartext password. An attacker could use this access to create a new user account or control the device.

Weakness classification

  • CWE-319: Cleartext Transmission of Sensitive Information

Primary references