What is CVE-2020-9420?

CVE-2020-9420 is a medium-severity vulnerability in Arcadyan Vrv9506jac23, classified under Cleartext Transmission of Sensitive Information. CVSS score: 6.5/10. Published 2022-12-14.

How severe is CVE-2020-9420?

Medium severity. CVSS v3 base score is 6.5 out of 10.

Is CVE-2020-9420 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Arcadyan Vrv9506jac23

CVE-2020-9420

The login password of the web administrative dashboard in Arcadyan Wifi routers VRV9506JAC23 is sent in cleartext, allowing an attacker to sniff and intercept traffic to learn the administrative credentials to the router.

EPSS: 0.005 (38.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N.

Affected products

Weakness classification (CWE)

CWE-319 — Cleartext Transmission of Sensitive Information

Public proof-of-concept exploits

Live-Hack-CVE/CVE-2020-9420

References

cve@mitre.org (Exploit, Third Party Advisory)

Frequently asked questions

What is CVE-2020-9420?: CVE-2020-9420 is a medium-severity vulnerability in Arcadyan Vrv9506jac23, classified under Cleartext Transmission of Sensitive Information. CVSS score: 6.5/10. Published 2022-12-14.
How severe is CVE-2020-9420?: Medium severity. CVSS v3 base score is 6.5 out of 10.
Is CVE-2020-9420 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.