PT-2017-13767 · Intelbras · Intelbras Wrn 150

CVE-2017-14942

·

Publicado

2017-09-29

·

Atualizado

2024-02-14

CVSS v3.1

9.8

Crítica

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Intelbras WRN 150 devices (affected versions not specified)
Description The issue allows remote attackers to read the configuration file and bypass authentication by making a direct request for "cgi-bin/DownloadCfg/RouterCfm.cfg" with an admin:language=pt cookie.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Files Accessible to External Parties

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-552

Identificadores relacionados

CVE-2017-14942

Produtos afetados

Intelbras Wrn 150