Lucene search
+L

6 matches found

CNVD
CNVD
•added 2020/03/09 12:00 a.m.•14 views

HUMAX HGA12R-02 BRGCAA Session Hijacking Vulnerability

The HUMAX HGA12R-02 BRGCAA is a wireless router from HUMAX Korea. A security vulnerability exists in the session management feature in the HUMAX HGA12R-02 BRGCAA version 1.1.53. An attacker can exploit the vulnerability to hijack a valid user session and thus create a user account or control a...

9.1CVSS6.8AI score0.01203EPSS
SaveExploits0References1
NVD
NVD
•added 2020/03/05 1:15 p.m.•20 views

CVE-2020-9370

HUMAX HGA12R-02 BRGCAA 1.1.53 devices allow Session Hijacking...

9.1CVSS9.3AI score0.01203EPSS
SaveExploits0References2
CVE
CVE
•added 2020/03/05 12:27 p.m.•55 views

CVE-2020-9370

HUMAX HGA12R-02 BRGCAA 1.1.53 devices have a session management vulnerability that enables session hijacking. The CNVD entry states an attacker can hijack a valid user session and masquerade as that user, potentially creating a new account or controlling the device with the session’s privileges. ...

9.1CVSS9.2AI score0.01203EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/03/05 12:00 a.m.•3 views

CVE-2020-9370: Session Fixation

HUMAX HGA12R-02 BRGCAA 1.1.53 devices allow Session Hijacking...

9.1CVSS8.2AI score0.01203EPSS
SaveExploits0References2
Prion
Prion
•added 2020/03/04 7:15 p.m.•24 views

Authentication flaw

An issue was discovered on HUMAX HGA12R-02 BRGCAA 1.1.53 devices. A vulnerability in the authentication functionality in the web-based interface could allow an unauthenticated remote attacker to capture packets at the time of authentication and gain access to the cleartext password. An attacker...

5CVSS9.6AI score0.01258EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/03/04 12:00 a.m.•4 views

CVE-2020-9477: Cleartext Transmission of Sensitive Information

An issue was discovered on HUMAX HGA12R-02 BRGCAA 1.1.53 devices. A vulnerability in the authentication functionality in the web-based interface could allow an unauthenticated remote attacker to capture packets at the time of authentication and gain access to the cleartext password. An attacker...

9.8CVSS8.2AI score0.01258EPSS
SaveExploits0References2
Rows per page
Query Builder