HUMAX HGA12R-02 BRGCAA Session Hijacking Vulnerability

The HUMAX HGA12R-02 BRGCAA is a wireless router from HUMAX Korea. A security vulnerability exists in the session management feature in the HUMAX HGA12R-02 BRGCAA version 1.1.53. An attacker can exploit the vulnerability to hijack a valid user session and thus create a user account or control a...

CVE-2020-9370

HUMAX HGA12R-02 BRGCAA 1.1.53 devices allow Session Hijacking...

CVE-2020-9370

HUMAX HGA12R-02 BRGCAA 1.1.53 devices allow Session Hijacking...

CVE-2020-9370

HUMAX HGA12R-02 BRGCAA 1.1.53 devices have a session management vulnerability that enables session hijacking. The CNVD entry states an attacker can hijack a valid user session and masquerade as that user, potentially creating a new account or controlling the device with the session’s privileges. ...

CVE-2020-9370: Session Fixation

HUMAX HGA12R-02 BRGCAA 1.1.53 devices allow Session Hijacking...

PT-2020-20616

Name of the Vulnerable Software and Affected Versions HUMAX HGA12R-02 BRGCAA version 1.1.53 Description The issue allows Session Hijacking. Recommendations For HUMAX HGA12R-02 BRGCAA version 1.1.53, at the moment, there is no information about a newer version that contains a fix for this issue...

Authentication flaw

An issue was discovered on HUMAX HGA12R-02 BRGCAA 1.1.53 devices. A vulnerability in the authentication functionality in the web-based interface could allow an unauthenticated remote attacker to capture packets at the time of authentication and gain access to the cleartext password. An attacker...

PT-2020-20689

Name of the Vulnerable Software and Affected Versions HUMAX HGA12R-02 BRGCAA version 1.1.53 Description A vulnerability exists in the authentication functionality of the web-based interface, allowing an unauthenticated remote attacker to capture packets during authentication and gain access to th...

CVE-2020-9477: Cleartext Transmission of Sensitive Information

An issue was discovered on HUMAX HGA12R-02 BRGCAA 1.1.53 devices. A vulnerability in the authentication functionality in the web-based interface could allow an unauthenticated remote attacker to capture packets at the time of authentication and gain access to the cleartext password. An attacker...