Cross site request forgery (csrf)

Intelbras RF1200 1.1.3 devices allow CSRF to bypass the login.html form, as demonstrated by launching a scrapy process...

CVE-2020-8829

CVE-2020-8829 is a CSRF vulnerability in Intelbras CIP 92200 (VoIP switch). Multiple connected sources describe that an attacker can access the panel and perform scraping or similar analysis due to inadequate request validation. Root cause is described in CNVD-2020-35468 as failing to properly va...

CVE-2020-8829

CSRF on Intelbras CIP 92200 devices allows an attacker to access the panel and perform scraping or other analysis...

CVE-2019-19517

CVE-2019-19517 concerns Intelbras RF1200 firmware version 1.1.3 where a Cross-Site Request Forgery (CSRF) vulnerability allows bypass of the login.html form. The vulnerability is described in multiple sources as enabling an attacker to bypass authentication, demonstrated by launching a scrapy pro...

CVE-2019-19517

Intelbras RF1200 1.1.3 devices allow CSRF to bypass the login.html form, as demonstrated by launching a scrapy process...

Intelbras Wireless N 150Mbps WRN240 - Authentication Bypass (Config Upload)

Exploit Title: Intelbras Wireless N 150Mbps WRN240 - Authentication Bypass Config Upload Date: 2019-11-20 Exploit Author: Elber Tavares Vendor Homepage: https://www.intelbras.com/ Software Link: http://en.intelbras.com.br/node/1033 Version: Intelbras Wireless N 150Mbps - WRN240 Tested on: linux,...

Intelbras Wireless N 150Mbps WRN240 - Authentication Bypass (Config Upload) Vulnerability

Exploit for hardware platform in category web applications Exploit Title: Intelbras Wireless N 150Mbps WRN240 - Authentication Bypass Config Upload Exploit Author: Elber Tavares Vendor Homepage: https://www.intelbras.com/ Software Link: http://en.intelbras.com.br/node/1033 Version: Intelbras...

Intelbras Wireless N 150Mbps WRN240 - Authentication Bypass (Config Upload)

Intelbras Wireless N 150Mbps WRN240 - Authentication Bypass Config Upload Exploit Title: Intelbras Wireless N 150Mbps WRN240 - Authentication Bypass Config Upload Date: 2019-11-20 Exploit Author: Elber Tavares Vendor Homepage: https://www.intelbras.com/ Software Link:...

Intelbras Wireless N 150Mbps WRN240 Authentication Bypass

Exploit Title: Intelbras Wireless N 150Mbps WRN240 - Authentication Bypass Config Upload Date: 2019-11-20 Exploit Author: Elber Tavares Vendor Homepage: https://www.intelbras.com/ Software Link: http://en.intelbras.com.br/node/1033 Version: Intelbras Wireless N 150Mbps - WRN240 Tested on: linux,...

Unspecified Vulnerability in Intelbras WRN240

Intelbras WRN240 is a wireless router from Intelbras Poland. A security vulnerability exists in the Intelbras WRN240 that stems from the program not authenticating firmware substitutions. An attacker can exploit the vulnerability by sending a POST request to the incoming/Firmware.cfg URI to repla...

CVE-2019-19142

Intelbras WRN240 devices do not require authentication to replace the firmware via a POST request to the incoming/Firmware.cfg URI...

CVE-2019-19142

Intelbras WRN240 devices do not require authentication to replace the firmware via a POST request to the incoming/Firmware.cfg URI...

Authentication flaw

Intelbras WRN240 devices do not require authentication to replace the firmware via a POST request to the incoming/Firmware.cfg URI...

CVE-2019-19142

The CVE-2019-19142 issue affects Intelbras WRN240 devices and is an authentication bypass for firmware replacement. A POST to the incoming/Firmware.cfg URI does not require authentication, enabling potential remote firmware substitution. Impact is high (integrity impact) per sources; exploitation...

CVE-2019-19142

Intelbras WRN240 devices do not require authentication to replace the firmware via a POST request to the incoming/Firmware.cfg URI...

Unspecified Vulnerability in Intelbras IWR 3000N

Intelbras IWR 3000N is a wireless router from Intelbras Poland. A security vulnerability exists in the Intelbras IWR 3000N version 1.8.7, which originates from the fact that when the administrator password is changed from a client's IP address, any client from that IP address can gain...

CVE-2019-20004

An issue was discovered on Intelbras IWR 3000N 1.8.7 devices. When the administrator password is changed from a certain client IP address, administrative authorization remains available to any client at that IP address, leading to complete control of the router...

CVE-2019-20004

An issue was discovered on Intelbras IWR 3000N 1.8.7 devices. When the administrator password is changed from a certain client IP address, administrative authorization remains available to any client at that IP address, leading to complete control of the router...

Design/Logic Flaw

An issue was discovered on Intelbras IWR 3000N 1.8.7 devices. When the administrator password is changed from a certain client IP address, administrative authorization remains available to any client at that IP address, leading to complete control of the router...

CVE-2019-20004

The CVE-2019-20004 issue affects Intelbras IWR 3000N devices running 1.8.7. When the administrator password is changed from a specific client IP, administrative authorization remains usable by any client from that IP, enabling full router control. Root cause: post-change authorization persists fo...