What’s Vulnerable › Vulnerabilities

CVE-2020-9476

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-03-04 · updated 2026-06-17
• Weakness: CWE-326

Description

ARRIS TG1692A devices allow remote attackers to discover the administrator login name and password by reading the /login page and performing base64 decoding.

Affected products

• Commscope Arris Tg1692A Firmware: 9.1.103de2

References

• https://arris.secure.force.com/consumers/ConsumerProductSupport
• https://medium.com/%40rsantos_14778/info-disclosure-cve-2020-9476-494a08298c6b
• https://arris.secure.force.com/consumers/ConsumerProductSupport
• https://medium.com/%40rsantos_14778/info-disclosure-cve-2020-9476-494a08298c6b

Get alerted when CVE-2020-9476 or the next vulnerability affects your stack