Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
intelbras vulnerabilities and exploits
(subscribe to this query)
8.8
CVSSv3
CVE-2021-32402
Intelbras Router RF 301K Firmware 1.1.2 is vulnerable to Cross Site Request Forgery (CSRF) due to lack of validation and insecure configurations in inputs and modules.
Intelbras Rf 301k Firmware 1.1.2
5.4
CVSSv3
CVE-2022-24654
Authenticated stored cross-site scripting (XSS) vulnerability in "Field Server Address" field in INTELBRAS ATA 200 Firmware 74.19.10.21 allows malicious users to inject JavaScript code through a crafted payload.
Intelbras Ata 200 Firmware 74.19.10.21
1 Github repository
7.5
CVSSv3
CVE-2023-36144
An authentication bypass in Intelbras Switch SG 2404 MR in firmware 1.00.54 allows an unauthenticated malicious user to download the backup file of the device, exposing critical information about the device configuration.
Intelbras Sg 2404 Mr Firmware 1.00.54
1 Github repository
7.5
CVSSv3
CVE-2019-11415
An issue exists on Intelbras IWR 3000N 1.5.0 devices. A malformed login request allows remote malicious users to cause a denial of service (reboot), as demonstrated by JSON misparsing of the \""} string to v1/system/login.
Intelbras Iwr 3000n Firmware 1.5.0
1 EDB exploit
8.1
CVSSv3
CVE-2018-12455
Intelbras NPLUG 1.0.0.14 wireless repeater devices have a critical vulnerability that allows an malicious user to authenticate in the web interface just by using "admin:" as the name of a cookie.
Intelbras Nplug Firmware 1.0.0.14
8.8
CVSSv3
CVE-2018-12456
Intelbras NPLUG 1.0.0.14 wireless repeater devices have no CSRF token protection in the web interface, allowing malicious users to perform actions such as changing the wireless SSID, rebooting the device, editing access control lists, or activating remote access.
Intelbras Nplug Firmware 1.0.0.14
9.8
CVSSv3
CVE-2019-17600
Intelbras IWR 1000N 1.6.4 devices allow disclosure of the administrator login name and password because v1/system/user is mishandled.
Intelbras Iwr 1000n Firmware 1.6.4
8.8
CVSSv3
CVE-2019-19517
Intelbras RF1200 1.1.3 devices allow CSRF to bypass the login.html form, as demonstrated by launching a scrapy process.
Intelbras Action Rf 1200 Firmware 1.1.3
9.8
CVSSv3
CVE-2017-14942
Intelbras WRN 150 devices allow remote malicious users to read the configuration file, and consequently bypass authentication, via a direct request for cgi-bin/DownloadCfg/RouterCfm.cfg containing an admin:language=pt cookie.
Intelbras Wrn 150 Firmware 1.0.1
1 Github repository
7.2
CVSSv3
CVE-2019-19007
Intelbras IWR 3000N 1.8.7 devices allow disclosure of the administrator login name and password because v1/system/user is mishandled, a related issue to CVE-2019-17600.
Intelbras Iwr 3000n Firmware 1.8.7
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
authentication bypass
CVE-2024-30051
remote
CVE-2024-27954
CVE-2023-51483
CVE-2023-47782
SSRF
CVE-2024-24715
CVE-2023-52424
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
NEXT »