PT-2020-10063 · Intelbras · Intelbras Win 240

F0Lds · Published 2020-01-17 · Updated 2023-02-01 · CVE-2019-19142

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Intelbras WRN240 devices (affected versions not specified)

Description The issue allows replacement of the firmware without requiring authentication, via a POST request to the "incoming/Firmware.cfg" API endpoint.

Recommendations For Intelbras WRN240 devices, as a temporary workaround, consider restricting access to the "incoming/Firmware.cfg" API endpoint until a patch is available.

Exploit

Fix

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2019-19142

Affected Products

Intelbras Win 240

References · 5

• 🔥 https://exploit-db.com/exploits/48158 · Exploit
• 🔥 http://packetstormsecurity.com/files/156589/Intelbras-Wireless-N-150Mbps-WRN240-Authentication-Bypass.html · Exploit
• 🔥 https://fireshellsecurity.team/hack-n-routers · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-19142 · Security Note
• https://osv.dev/vulnerability/CVE-2019-19142 · Vendor Advisory