humaxdigital 関連製品全体の CVE とセキュリティ脆弱性情報を集約し、CVSS、EPSS、公開日、脆弱性情報データを掲載しています。
公開された問題は vendor risk cross-site scripting and パス処理の欠陥 に関連することが多く、vendor surface software deployment and vendor surface production workloads の文脈で ファイル上書き and vendor impact session compromise などの暴露リスクを伴う場合があります。
掲載データは公開脆弱性情報とセキュリティ公告に基づき、過去の暴露面と修補優先度の評価に利用できます。
| CVE | 概要 | ソース | CVSS 最大値 | EPSS（%） | 公開 | 更新 |
|---|---|---|---|---|---|---|
| CVE-2020-27366 | Cross Site Scripting (XSS) vulnerability in wlscanresults.html in Humax HGB10R-02 BRGCAB version 1.0.03, allows local attackers to execute arbitrary code. | [email protected] | 6.1 | 0.37% | 2023-08-28 | 2026-06-16 |
| CVE-2020-9370 | HUMAX HGA12R-02 BRGCAA 1.1.53 devices allow Session Hijacking. | [email protected] | 9.1 | 1.20% | 2020-03-05 | 2026-06-16 |
| CVE-2020-9477 | An issue was discovered on HUMAX HGA12R-02 BRGCAA 1.1.53 devices. A vulnerability in the authentication functionality in the web-based interface could allow an unauthenticated remote attacker to capture packets at the time of authentication and gain access to the cleartext password. An attacker could use this access to create a new user account or control the device. | [email protected] | 9.8 | 1.26% | 2020-03-04 | 2026-06-16 |
| CVE-2019-19890 | An issue was discovered on Humax Wireless Voice Gateway HGB10R-2 20160817_1855 devices. Admin credentials are sent over cleartext HTTP. | [email protected] | 7.5 | 0.99% | 2019-12-18 | 2026-06-16 |
| CVE-2019-19889 | An issue was discovered on Humax Wireless Voice Gateway HGB10R-2 20160817_1855 devices. The attacker can discover admin credentials in the backup file, aka backupsettings.conf. | [email protected] | 7.5 | 1.10% | 2019-12-18 | 2026-06-16 |
| CVE-2017-11435 | The Humax Wi-Fi Router model HG100R-* 2.0.6 is prone to an authentication bypass vulnerability via specially crafted requests to the management console. The bug is exploitable remotely when the router is configured to expose the management console. The router is not validating the session token while returning answers for some methods in url '/api'. An attacker can use this vulnerability to retrieve sensitive information such as private/public IP addresses, SSID names, and passwords. | [email protected] | 9.8 | 10.05% | 2017-07-19 | 2026-06-16 |
| CVE-2017-7317 | An issue was discovered on Humax Digital HG100 2.0.6 devices. The attacker can find the root credentials in the backup file, aka GatewaySettings.bin. | [email protected] | 9.8 | 2.24% | 2017-07-03 | 2026-06-16 |
| CVE-2017-7316 | An issue was discovered on Humax Digital HG100R 2.0.6 devices. There is XSS on the 404 page. | [email protected] | 6.1 | 0.76% | 2017-07-03 | 2026-06-16 |
| CVE-2017-7315 | An issue was discovered on Humax Digital HG100R 2.0.6 devices. To download the backup file it's not necessary to use credentials, and the router credentials are stored in plaintext inside the backup, aka GatewaySettings.bin. | [email protected] | 9.8 | 2.12% | 2017-07-03 | 2026-06-16 |