CVE-2020-36963: Missing Authentication for Critical Function

Intelbras Router RF 301K firmware version 1.1.2 contains an authentication bypass vulnerability that allows unauthenticated attackers to download router configuration files. Attackers can send a specific HTTP GET request to /cgi-bin/DownloadCfg/RouterCfm.cfg to retrieve sensitive router...

Intelbras Router RF 301K - 'DNS Hijacking' Cross-Site Request Forgery (CSRF)

Exploit Title: Intelbras Router RF 301K - 'DNS Hijacking' Cross-Site Request Forgery CSRF Date: 01/05/2021 Exploit Author: Rodolfo Mariano Version: Firmware 1.1.2-1.1.5 CVE: 2021-32403 Exploit Code: document.forms0.submit;...

CVE-2021-32403

Intelbras Router RF 301K Firmware 1.1.2 is vulnerable to Cross Site Request Forgery CSRF due to lack of security mechanisms for token protection and unsafe inputs and modules...

CVE-2021-32402: Cross-Site Request Forgery (CSRF)

Intelbras Router RF 301K Firmware 1.1.2 is vulnerable to Cross Site Request Forgery CSRF due to lack of validation and insecure configurations in inputs and modules...

CVE-2021-32403: Cross-Site Request Forgery (CSRF)

Intelbras Router RF 301K Firmware 1.1.2 is vulnerable to Cross Site Request Forgery CSRF due to lack of security mechanisms for token protection and unsafe inputs and modules...

PT-2021-19701

Name of the Vulnerable Software and Affected Versions: Intelbras Router RF 301K Firmware version 1.1.2 Description: The issue is related to a lack of security mechanisms for token protection and the presence of unsafe inputs and modules, making it vulnerable to Cross Site Request Forgery CSRF...

PT-2021-19700

Name of the Vulnerable Software and Affected Versions: Intelbras Router RF 301K Firmware version 1.1.2 Description: The issue is related to a lack of validation and insecure configurations in inputs and modules, leading to Cross Site Request Forgery CSRF. Recommendations: For Intelbras Router RF...