Lucene search
HistoryDec 14, 2022 - 1:15 a.m.
CVE-2020-9420
cve-2020-9420
arcadyan
vrv9506jac23
cleartext
login
vulnerability
administrative credentials
router
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
0.001 Low
EPSS
Percentile
29.7%
The login password of the web administrative dashboard in Arcadyan Wifi routers VRV9506JAC23 is sent in cleartext, allowing an attacker to sniff and intercept traffic to learn the administrative credentials to the router.
Affected configurations
Node
arcadyanvrv9506jac23_firmwareMatch-
arcadyanvrv9506jac23Match-
Related
cve
cve
CVE-2020-9420
2022-12-14 01:15:10
cvelist
cvelist
CVE-2020-9420
2022-12-14 00:00:00
prion
prion
Default credentials
2022-12-14 01:15:00
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
0.001 Low
EPSS
Percentile
29.7%
Related for NVD:CVE-2020-9420