CVE-2020-9477

Name of the Vulnerable Software and Affected Versions HUMAX HGA12R-02 BRGCAA version 1.1.53

Description A vulnerability exists in the authentication functionality of the web-based interface, allowing an unauthenticated remote attacker to capture packets during authentication and gain access to the cleartext password. This could enable the attacker to create a new user account or control the device.

Recommendations For HUMAX HGA12R-02 BRGCAA version 1.1.53, consider restricting access to the web-based interface until a fix is available. As a temporary workaround, avoid using the web-based interface for authentication to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.