PT-2020-10317 · Intelbras · Intelbras Iwr 3000N

Published 2020-01-05 · Updated 2020-01-14 · CVE-2019-20004

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Intelbras IWR 3000N version 1.8.7

Description An issue allows administrative authorization to remain available to any client at a specific IP address after the administrator password is changed from that IP address, potentially leading to complete control of the router.

Recommendations For Intelbras IWR 3000N version 1.8.7, consider restricting access to the administrative interface to minimize the risk of exploitation until a patch is available.

Exploit

Fix

Weakness Enumeration

CWE-640

Related Identifiers

CVE-2019-20004

Affected Products

Intelbras Iwr 3000N

References · 5

• 🔥 https://medium.com/@rsantos_14778/remote-control-cve-2019-20004-21f77e976715 · Exploit
• http://en.intelbras.com.br/downloads · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-20004 · Security Note
• https://osv.dev/vulnerability/CVE-2019-20004 · Vendor Advisory
• https://medium.com/%40rsantos_14778/remote-control-cve-2019-20004-21f77e976715 · Note