Lucene search

K
prionPRIOn knowledge basePRION:CVE-2018-11094
HistoryMay 15, 2018 - 7:29 p.m.

Authentication flaw

2018-05-1519:29:00
PRIOn knowledge base
www.prio-n.com
3

9.4 High

AI Score

Confidence

High

0.075 Low

EPSS

Percentile

94.1%

An issue was discovered on Intelbras NCLOUD 300 1.0 devices. /cgi-bin/ExportSettings.sh, /goform/updateWPS, /goform/RebootSystem, and /goform/vpnBasicSettings do not require authentication. For example, when an HTTP POST request is made to /cgi-bin/ExportSettings.sh, the username, password, and other details are retrieved.

CPENameOperatorVersion
ncloud_300_firmwareeq1.0

9.4 High

AI Score

Confidence

High

0.075 Low

EPSS

Percentile

94.1%