EUVD-2020-30294

Malware in sbrugna...

CVE-2020-9370

HUMAX HGA12R-02 BRGCAA 1.1.53 devices allow Session Hijacking...

HUMAX HGA12R-02 BRGCAA Session Hijacking Vulnerability

The HUMAX HGA12R-02 BRGCAA is a wireless router from HUMAX Korea. A security vulnerability exists in the session management feature in the HUMAX HGA12R-02 BRGCAA version 1.1.53. An attacker can exploit the vulnerability to hijack a valid user session and thus create a user account or control a...

CVE-2020-9370

HUMAX HGA12R-02 BRGCAA 1.1.53 devices allow Session Hijacking...

CVE-2020-9370

HUMAX HGA12R-02 BRGCAA 1.1.53 devices allow Session Hijacking...

CVE-2020-9370

HUMAX HGA12R-02 BRGCAA 1.1.53 devices have a session management vulnerability that enables session hijacking. The CNVD entry states an attacker can hijack a valid user session and masquerade as that user, potentially creating a new account or controlling the device with the session’s privileges. ...

CVE-2020-9477

An issue was discovered on HUMAX HGA12R-02 BRGCAA 1.1.53 devices. A vulnerability in the authentication functionality in the web-based interface could allow an unauthenticated remote attacker to capture packets at the time of authentication and gain access to the cleartext password. An attacker...

CVE-2020-9477

An issue was discovered on HUMAX HGA12R-02 BRGCAA 1.1.53 devices. A vulnerability in the authentication functionality in the web-based interface could allow an unauthenticated remote attacker to capture packets at the time of authentication and gain access to the cleartext password. An attacker...

Authentication flaw

An issue was discovered on HUMAX HGA12R-02 BRGCAA 1.1.53 devices. A vulnerability in the authentication functionality in the web-based interface could allow an unauthenticated remote attacker to capture packets at the time of authentication and gain access to the cleartext password. An attacker...

CVE-2020-9477

CVE-2020-9477 concerns HUMAX HGA12R-02 BRGCAA 1.1.53 devices where a flaw in the web-based authentication allows an unauthenticated remote attacker to capture authentication packets and obtain the cleartext password. This enables the attacker to create a new user account or take control of the de...