PT-2017-13302 · Intelbras · Intelbras Wireless N 150Mbps Router

Elber Tavares · Published 2017-09-07 · Updated 2024-02-14 · CVE-2017-14219

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Intelbras Wireless N 150Mbps router with firmware WRN 240

Description The issue allows attackers to steal wireless credentials without being connected to the network. This is related to userRpm/popupSiteSurveyRpm.htm and userRpm/WlanSecurityRpm.htm. The attack vector involves a crafted ESSID.

Recommendations For Intelbras Wireless N 150Mbps router with firmware WRN 240, consider restricting access to the userRpm/popupSiteSurveyRpm.htm and userRpm/WlanSecurityRpm.htm pages until a fix is available. Avoid using crafted ESSIDs to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2017-14219

Affected Products

Intelbras Wireless N 150Mbps Router

References · 3

• 🔥 https://exploit-db.com/exploits/42633 · Exploit
• 🔥 http://whiteboyz.xyz/xss-roteador-intelbras-wrn-240.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2017-14219 · Security Note