Intelbras

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2019-11415 1Intelbras 1Iwr 3000n Firmware Jun 17, 2026 Apr 22, 2019 N/A· v4 7.5 HIGH· v3 7.8 HIGH· v2 An issue was discovered on Intelbras IWR 3000N 1.5.0 devices. A malformed login request allows remote attackers to cause a denial of service (reboot), as demonstrated by JSON misparsing of the \""} string to v1/system/lo...Show more An issue was discovered on Intelbras IWR 3000N 1.5.0 devices. A malformed login request allows remote attackers to cause a denial of service (reboot), as demonstrated by JSON misparsing of the \""} string to v1/system/login.Show less
CVE-2019-11414 1Intelbras 1Iwr 3000n Firmware Jun 17, 2026 Apr 22, 2019 N/A· v4 8.8 HIGH· v3 4.3 MEDIUM· v2 An issue was discovered on Intelbras IWR 3000N 1.5.0 devices. When the administrator password is changed from a certain client IP address, administrative authorization remains available to any client at that IP address,...Show more An issue was discovered on Intelbras IWR 3000N 1.5.0 devices. When the administrator password is changed from a certain client IP address, administrative authorization remains available to any client at that IP address, leading to complete control of the router.Show less
CVE-2018-17337 1Intelbras 1Nplug Firmware Nov 21, 2024 Oct 10, 2018 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 Intelbras NPLUG 1.0.0.14 devices have XSS via a crafted SSID that is received via a network broadcast.
CVE-2018-12456 1Intelbras 1Nplug Firmware Nov 21, 2024 Oct 10, 2018 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Intelbras NPLUG 1.0.0.14 wireless repeater devices have no CSRF token protection in the web interface, allowing attackers to perform actions such as changing the wireless SSID, rebooting the device, editing access contro...Show more Intelbras NPLUG 1.0.0.14 wireless repeater devices have no CSRF token protection in the web interface, allowing attackers to perform actions such as changing the wireless SSID, rebooting the device, editing access control lists, or activating remote access.Show less
CVE-2018-12455 1Intelbras 1Nplug Firmware Nov 21, 2024 Oct 10, 2018 N/A· v4 8.1 HIGH· v3 9.3 HIGH· v2 Intelbras NPLUG 1.0.0.14 wireless repeater devices have a critical vulnerability that allows an attacker to authenticate in the web interface just by using "admin:" as the name of a cookie.
CVE-2018-10369 1Intelbras 1Win 240 Firmware Nov 21, 2024 Aug 15, 2018 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 A Cross-site scripting (XSS) vulnerability was discovered on Intelbras Win 240 V1.1.0 devices. An attacker can change the Admin Password without a Login.
CVE-2018-11094 1Intelbras 1Ncloud 300 Firmware Nov 21, 2024 May 15, 2018 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 An issue was discovered on Intelbras NCLOUD 300 1.0 devices. /cgi-bin/ExportSettings.sh, /goform/updateWPS, /goform/RebootSystem, and /goform/vpnBasicSettings do not require authentication. For example, when an HTTP POST...Show more An issue was discovered on Intelbras NCLOUD 300 1.0 devices. /cgi-bin/ExportSettings.sh, /goform/updateWPS, /goform/RebootSystem, and /goform/vpnBasicSettings do not require authentication. For example, when an HTTP POST request is made to /cgi-bin/ExportSettings.sh, the username, password, and other details are retrieved.Show less
CVE-2018-9010 1Intelbras 2Tip200 Firmware Tip200lite Firmware Jun 17, 2026 Mar 25, 2018 N/A· v4 7.2 HIGH· v3 4.0 MEDIUM· v2 Intelbras TELEFONE IP TIP200/200 LITE 60.0.75.29 devices allow remote authenticated admins to read arbitrary files via the /cgi-bin/cgiServer.exx page parameter, aka absolute path traversal. In some cases, authentication...Show more Intelbras TELEFONE IP TIP200/200 LITE 60.0.75.29 devices allow remote authenticated admins to read arbitrary files via the /cgi-bin/cgiServer.exx page parameter, aka absolute path traversal. In some cases, authentication can be achieved via the admin account with its default admin password.Show less
CVE-2017-14942 1Intelbras 1Wrn 150 Firmware May 13, 2026 Sep 30, 2017 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Intelbras WRN 150 devices allow remote attackers to read the configuration file, and consequently bypass authentication, via a direct request for cgi-bin/DownloadCfg/RouterCfm.cfg containing an admin:language=pt cookie.
CVE-2017-14219 1Intelbras 1Wrn 240 Firmware May 13, 2026 Sep 7, 2017 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 XSS (persistent) on the Intelbras Wireless N 150Mbps router with firmware WRN 240 allows attackers to steal wireless credentials without being connected to the network, related to userRpm/popupSiteSurveyRpm.htm and userR...Show more XSS (persistent) on the Intelbras Wireless N 150Mbps router with firmware WRN 240 allows attackers to steal wireless credentials without being connected to the network, related to userRpm/popupSiteSurveyRpm.htm and userRpm/WlanSecurityRpm.htm. The attack vector is a crafted ESSID, as demonstrated by an "airbase-ng -e" command.Show less

Previous 1 23