CVE-2020-10376

CRITICAL

Technicolor TC7337NET 08.89.17.23.03 - Cleartext Transmission of Sensitive Information via HTTP Basic Auth

Title source: llm
STIX 2.1

Description

Technicolor TC7337NET 08.89.17.23.03 devices allow remote attackers to discover passwords by sniffing the network for an "Authorization: Basic" HTTP header.

References (1)

Core 1

Scores

CVSS v3 9.8
EPSS 0.0106
EPSS Percentile 60.3%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-319
Status published
Products (1)
technicolor/tc7337net_firmware 08.89.17.23.03
Published Mar 11, 2020
Tracked Since Feb 18, 2026