CVE-2020-9476 - ARRIS TG1692A devices allow remote attackers to discover the administrator login name and password by reading the /login page and performing base64 decoding

Back Back to CVE browser

HIGH

ARRIS TG1692A devices allow remote attackers to discover the administrator login name and password by reading the /login page and performing base64 decoding

Published Mar 4, 2020

7.5

HIGH

CVSS 3.1

EPSS 0.96%

Description

ARRIS TG1692A devices allow remote attackers to discover the administrator login name and password by reading the /login page and performing base64 decoding.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-326

Inadequate Encryption Strength

References (2)

https://arris.secure.force.com/consumers/ConsumerProductSupport
x_refsource_MISCVendor Advisory
https://medium.com/%40rsantos_14778/info-disclosure-cve-2020-9476-494a08298c6b
x_refsource_MISC

Link	Providers	Tags
https://arris.secure.force.com/consumers/ConsumerProductSupport		x_refsource_MISCVendor Advisory
https://medium.com/%40rsantos_14778/info-disclosure-cve-2020-9476-494a08298c6b		x_refsource_MISC