Lucene search

K
cvelistMitreCVELIST:CVE-2018-11094
HistoryMay 15, 2018 - 7:00 p.m.

CVE-2018-11094

2018-05-1519:00:00
mitre
www.cve.org

9.5 High

AI Score

Confidence

High

0.075 Low

EPSS

Percentile

94.1%

An issue was discovered on Intelbras NCLOUD 300 1.0 devices. /cgi-bin/ExportSettings.sh, /goform/updateWPS, /goform/RebootSystem, and /goform/vpnBasicSettings do not require authentication. For example, when an HTTP POST request is made to /cgi-bin/ExportSettings.sh, the username, password, and other details are retrieved.

9.5 High

AI Score

Confidence

High

0.075 Low

EPSS

Percentile

94.1%