PT-2019-12299 · Intelbras · Intelbras Iwr 3000N

Publicado 2019-04-21 · Atualizado 2019-04-22 · CVE-2019-11414

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Intelbras IWR 3000N version 1.5.0

Description An issue allows administrative authorization to remain available to any client at a specific IP address after the administrator password is changed from that IP address, potentially leading to complete control of the router.

Recommendations For Intelbras IWR 3000N version 1.5.0, consider restricting access to the administrative interface to minimize the risk of exploitation until a fix is available.

Exploit

Correção

Enumeração de Fraquezas

CWE-640

Identificadores relacionados

CVE-2019-11414

Produtos afetados

Intelbras Iwr 3000N

Referências · 3

• 🔥 http://1.337.zone/2019/04/07/intelbras-iwr-3000n-1-5-0-unproper-de-authorization · Exploit
• https://osv.dev/vulnerability/CVE-2019-11414 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-11414 · Nota de Segurança