Search
Find a vulnerability
Search criteria
4 vulnerabilities found for hga12r-02_firmware by humaxdigital
CVE-2020-9370 (GCVE-0-2020-9370)
Vulnerability from nvd – Published: 2020-03-05 12:27 – Updated: 2024-08-04 10:26
VLAI
EPSS
VEX
Summary
HUMAX HGA12R-02 BRGCAA 1.1.53 devices allow Session Hijacking.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
2 references
| URL | Tags |
|---|---|
| https://uk.humaxdigital.com/network/hga12r-02/ | x_refsource_MISC |
| https://medium.com/%40rsantos_14778/hijacked-sess… | x_refsource_MISC |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-04T10:26:16.179Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://uk.humaxdigital.com/network/hga12r-02/"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://medium.com/%40rsantos_14778/hijacked-session-cve-2020-9370-255bbd02975a"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "HUMAX HGA12R-02 BRGCAA 1.1.53 devices allow Session Hijacking."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2020-03-05T12:27:54.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://uk.humaxdigital.com/network/hga12r-02/"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://medium.com/%40rsantos_14778/hijacked-session-cve-2020-9370-255bbd02975a"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2020-9370",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "HUMAX HGA12R-02 BRGCAA 1.1.53 devices allow Session Hijacking."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://uk.humaxdigital.com/network/hga12r-02/",
"refsource": "MISC",
"url": "https://uk.humaxdigital.com/network/hga12r-02/"
},
{
"name": "https://medium.com/@rsantos_14778/hijacked-session-cve-2020-9370-255bbd02975a",
"refsource": "MISC",
"url": "https://medium.com/@rsantos_14778/hijacked-session-cve-2020-9370-255bbd02975a"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2020-9370",
"datePublished": "2020-03-05T12:27:54.000Z",
"dateReserved": "2020-02-24T00:00:00.000Z",
"dateUpdated": "2024-08-04T10:26:16.179Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2020-9477 (GCVE-0-2020-9477)
Vulnerability from nvd – Published: 2020-03-04 18:16 – Updated: 2024-08-04 10:26
VLAI
EPSS
VEX
Summary
An issue was discovered on HUMAX HGA12R-02 BRGCAA 1.1.53 devices. A vulnerability in the authentication functionality in the web-based interface could allow an unauthenticated remote attacker to capture packets at the time of authentication and gain access to the cleartext password. An attacker could use this access to create a new user account or control the device.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
2 references
| URL | Tags |
|---|---|
| https://uk.humaxdigital.com/network/hga12r-02/ | x_refsource_MISC |
| https://medium.com/%40rsantos_14778/info-disclosu… | x_refsource_MISC |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-04T10:26:16.189Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://uk.humaxdigital.com/network/hga12r-02/"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://medium.com/%40rsantos_14778/info-disclosure-cve-2020-9477-29d0ca48d4fa"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "An issue was discovered on HUMAX HGA12R-02 BRGCAA 1.1.53 devices. A vulnerability in the authentication functionality in the web-based interface could allow an unauthenticated remote attacker to capture packets at the time of authentication and gain access to the cleartext password. An attacker could use this access to create a new user account or control the device."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2020-03-04T18:16:28.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://uk.humaxdigital.com/network/hga12r-02/"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://medium.com/%40rsantos_14778/info-disclosure-cve-2020-9477-29d0ca48d4fa"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2020-9477",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "An issue was discovered on HUMAX HGA12R-02 BRGCAA 1.1.53 devices. A vulnerability in the authentication functionality in the web-based interface could allow an unauthenticated remote attacker to capture packets at the time of authentication and gain access to the cleartext password. An attacker could use this access to create a new user account or control the device."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://uk.humaxdigital.com/network/hga12r-02/",
"refsource": "MISC",
"url": "https://uk.humaxdigital.com/network/hga12r-02/"
},
{
"name": "https://medium.com/@rsantos_14778/info-disclosure-cve-2020-9477-29d0ca48d4fa",
"refsource": "MISC",
"url": "https://medium.com/@rsantos_14778/info-disclosure-cve-2020-9477-29d0ca48d4fa"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2020-9477",
"datePublished": "2020-03-04T18:16:28.000Z",
"dateReserved": "2020-02-28T00:00:00.000Z",
"dateUpdated": "2024-08-04T10:26:16.189Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2020-9370 (GCVE-0-2020-9370)
Vulnerability from cvelistv5 – Published: 2020-03-05 12:27 – Updated: 2024-08-04 10:26
VLAI
EPSS
VEX
Summary
HUMAX HGA12R-02 BRGCAA 1.1.53 devices allow Session Hijacking.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
2 references
| URL | Tags |
|---|---|
| https://uk.humaxdigital.com/network/hga12r-02/ | x_refsource_MISC |
| https://medium.com/%40rsantos_14778/hijacked-sess… | x_refsource_MISC |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-04T10:26:16.179Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://uk.humaxdigital.com/network/hga12r-02/"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://medium.com/%40rsantos_14778/hijacked-session-cve-2020-9370-255bbd02975a"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "HUMAX HGA12R-02 BRGCAA 1.1.53 devices allow Session Hijacking."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2020-03-05T12:27:54.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://uk.humaxdigital.com/network/hga12r-02/"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://medium.com/%40rsantos_14778/hijacked-session-cve-2020-9370-255bbd02975a"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2020-9370",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "HUMAX HGA12R-02 BRGCAA 1.1.53 devices allow Session Hijacking."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://uk.humaxdigital.com/network/hga12r-02/",
"refsource": "MISC",
"url": "https://uk.humaxdigital.com/network/hga12r-02/"
},
{
"name": "https://medium.com/@rsantos_14778/hijacked-session-cve-2020-9370-255bbd02975a",
"refsource": "MISC",
"url": "https://medium.com/@rsantos_14778/hijacked-session-cve-2020-9370-255bbd02975a"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2020-9370",
"datePublished": "2020-03-05T12:27:54.000Z",
"dateReserved": "2020-02-24T00:00:00.000Z",
"dateUpdated": "2024-08-04T10:26:16.179Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2020-9477 (GCVE-0-2020-9477)
Vulnerability from cvelistv5 – Published: 2020-03-04 18:16 – Updated: 2024-08-04 10:26
VLAI
EPSS
VEX
Summary
An issue was discovered on HUMAX HGA12R-02 BRGCAA 1.1.53 devices. A vulnerability in the authentication functionality in the web-based interface could allow an unauthenticated remote attacker to capture packets at the time of authentication and gain access to the cleartext password. An attacker could use this access to create a new user account or control the device.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
2 references
| URL | Tags |
|---|---|
| https://uk.humaxdigital.com/network/hga12r-02/ | x_refsource_MISC |
| https://medium.com/%40rsantos_14778/info-disclosu… | x_refsource_MISC |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-04T10:26:16.189Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://uk.humaxdigital.com/network/hga12r-02/"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://medium.com/%40rsantos_14778/info-disclosure-cve-2020-9477-29d0ca48d4fa"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "An issue was discovered on HUMAX HGA12R-02 BRGCAA 1.1.53 devices. A vulnerability in the authentication functionality in the web-based interface could allow an unauthenticated remote attacker to capture packets at the time of authentication and gain access to the cleartext password. An attacker could use this access to create a new user account or control the device."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2020-03-04T18:16:28.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://uk.humaxdigital.com/network/hga12r-02/"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://medium.com/%40rsantos_14778/info-disclosure-cve-2020-9477-29d0ca48d4fa"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2020-9477",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "An issue was discovered on HUMAX HGA12R-02 BRGCAA 1.1.53 devices. A vulnerability in the authentication functionality in the web-based interface could allow an unauthenticated remote attacker to capture packets at the time of authentication and gain access to the cleartext password. An attacker could use this access to create a new user account or control the device."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://uk.humaxdigital.com/network/hga12r-02/",
"refsource": "MISC",
"url": "https://uk.humaxdigital.com/network/hga12r-02/"
},
{
"name": "https://medium.com/@rsantos_14778/info-disclosure-cve-2020-9477-29d0ca48d4fa",
"refsource": "MISC",
"url": "https://medium.com/@rsantos_14778/info-disclosure-cve-2020-9477-29d0ca48d4fa"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2020-9477",
"datePublished": "2020-03-04T18:16:28.000Z",
"dateReserved": "2020-02-28T00:00:00.000Z",
"dateUpdated": "2024-08-04T10:26:16.189Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}