PT-2019-12299 · Intelbras · Intelbras Iwr 3000N

Published 2019-04-21 · Updated 2019-04-22 · CVE-2019-11414

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Intelbras IWR 3000N version 1.5.0

Description An issue allows administrative authorization to remain available to any client at a specific IP address after the administrator password is changed from that IP address, potentially leading to complete control of the router.

Recommendations For Intelbras IWR 3000N version 1.5.0, consider restricting access to the administrative interface to minimize the risk of exploitation until a fix is available.

Exploit

Fix

Weakness Enumeration

CWE-640

Related Identifiers

CVE-2019-11414

Affected Products

Intelbras Iwr 3000N

References · 3

• 🔥 http://1.337.zone/2019/04/07/intelbras-iwr-3000n-1-5-0-unproper-de-authorization · Exploit
• https://osv.dev/vulnerability/CVE-2019-11414 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-11414 · Security Note