CVE-2020-9476

Katalog CVE

CVSS 7.5 · High EPSS 0,96%

Kerentanan Inadequate Encryption Strength pada commscope arris tg1692a firmware. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

ARRIS TG1692A devices allow remote attackers to discover the administrator login name and password by reading the /login page and performing base64 decoding.

Rincian

Terbit di NVD

4 Maret 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-326: Inadequate Encryption Strength

EPSS (30 hari)

0,96% peluang dieksploitasi; lebih tinggi dari 60,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://arris.secure.force.com/consumers/ConsumerProductSupport advisory vendor
• https://medium.com/%40rsantos_14778/info-disclosure-cve-2020-9476-494a08298c6b