HUMAX HGA12R-02 BRGCAA Session Hijacking Vulnerability

The HUMAX HGA12R-02 BRGCAA is a wireless router from HUMAX Korea. A security vulnerability exists in the session management feature in the HUMAX HGA12R-02 BRGCAA version 1.1.53. An attacker can exploit the vulnerability to hijack a valid user session and thus create a user account or control a...

CVE-2020-9370

HUMAX HGA12R-02 BRGCAA 1.1.53 devices allow Session Hijacking...

CVE-2020-9370

HUMAX HGA12R-02 BRGCAA 1.1.53 devices have a session management vulnerability that enables session hijacking. The CNVD entry states an attacker can hijack a valid user session and masquerade as that user, potentially creating a new account or controlling the device with the session’s privileges. ...

Authentication flaw

An issue was discovered on HUMAX HGA12R-02 BRGCAA 1.1.53 devices. A vulnerability in the authentication functionality in the web-based interface could allow an unauthenticated remote attacker to capture packets at the time of authentication and gain access to the cleartext password. An attacker...