Design/Logic Flaw

2019-04-2211:29:00

PRIOn knowledge base

www.prio-n.com

8.7 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

65.1%

JSON

An issue was discovered on Intelbras IWR 3000N 1.5.0 devices. When the administrator password is changed from a certain client IP address, administrative authorization remains available to any client at that IP address, leading to complete control of the router.

CPENameOperatorVersion
iwr_3000n_firmwareeq1.5.0

CPE	Name	Operator	Version
	iwr_3000n_firmware	eq	1.5.0

References

1.337.zone/2019/04/07/intelbras-iwr-3000n-1-5-0-unproper-de-authorization/