PT-2025-37079 · Intelbras · Iwr 3000N

Windsormoreira · Published 2025-09-10 · Updated 2025-10-17 · CVE-2025-55976

Positive Technologies (AI Summary)

CVSS v3.1

8.4

High

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Intelbras IWR 3000N version 1.9.8

Description: The Intelbras IWR 3000N version 1.9.8 exposes the Wi-Fi password in plaintext via the /api/wireless endpoint. An unauthenticated user on the local network can obtain the Wi-Fi network password by querying this endpoint.

Recommendations: Restrict access to the /api/wireless endpoint.

Exploit

Fix

Information Disclosure

Cleartext Transmission of Sensitive Information

Weakness Enumeration

CWE-200

CWE-319

Related Identifiers

CVE-2025-55976

Affected Products

Iwr 3000N

References · 7

• 🔥 https://medium.com/@windsormoreira/intelbras-iwr-3000n-unauthenticated-wi-fi-password-disclosure-cve-2025-55976-7cdac7770413 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-55976 · Security Note
• https://osv.dev/vulnerability/CVE-2025-55976 · Vendor Advisory
• https://twitter.com/CVEnew/status/1965920247841431815 · Twitter Post
• https://intelbras.com/pt-br/produto/roteador-wireless-n-300mbps-iwr-3000n · Note
• https://t.me/cveNotify/139240 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1965929923719111021 · Twitter Post