Cross site request forgery (csrf)

A CSRF issue was discovered on Intelbras IWR 3000N 1.8.7 devices, leading to complete control of the router, as demonstrated by v1/system/user...

CVE-2019-19996

Intelbras IWR 3000N (firmware 1.8.7) is affected by CVE-2019-19996: a malformed login request allows remote reboot via JSON misparsing of a '"}"' character to /v1/system/login. Impact described as denial of service; CVSS v3.1 base score 7.5 HIGH. No remediation details provided in the supplied do...

CVE-2019-19996

An issue was discovered on Intelbras IWR 3000N 1.8.7 devices. A malformed login request allows remote attackers to cause a denial of service reboot, as demonstrated by JSON misparsing of the "" string to v1/system/login...

CVE-2019-19995

A CSRF issue was discovered on Intelbras IWR 3000N 1.8.7 devices, leading to complete control of the router, as demonstrated by v1/system/user...

CVE-2019-19995

CVE-2019-19995 affects Intelbras IWR 3000N with firmware 1.8.7, where a Cross-Site Request Forgery (CSRF) flaw allows an attacker to gain complete control of the router via v1/system/user. The connected CNVD entry confirms CSRF in version 1.8.7; NVD listing cites high severity (CVSS v3.1: 8.8) wi...

Intelbras WRN 150 Cross-Site Request Forgery Vulnerability

Intelbras WRN 150 is a wireless router from Intelbras Poland. A cross-site request forgery vulnerability exists in Intelbras WRN 150 version 1.0.18. An attacker can exploit the vulnerability to change the password...

Unspecified Vulnerability in Intelbras IWR 3000N

Intelbras IWR 3000N is a wireless router from Intelbras Poland. An unspecified vulnerability exists in the Intelbras IWR 3000N, which stems from the program not handling v1/system/user correctly.An attacker can exploit this vulnerability to disclose the administrator login and password...

CVE-2019-19007

Intelbras IWR 3000N 1.8.7 devices allow disclosure of the administrator login name and password because v1/system/user is mishandled, a related issue to CVE-2019-17600...

CVE-2019-19007

Intelbras IWR 3000N 1.8.7 devices allow disclosure of the administrator login name and password because v1/system/user is mishandled, a related issue to CVE-2019-17600...

Design/Logic Flaw

Intelbras IWR 3000N 1.8.7 devices allow disclosure of the administrator login name and password because v1/system/user is mishandled, a related issue to CVE-2019-17600...

CVE-2019-19007

CVE-2019-19007 affects Intelbras IWR 3000N, version 1.8.7. The root cause is mishandling of v1/system/user, enabling disclosure of the administrator login name and password. This is described as related to CVE-2019-17600. The available documents do not provide exploit details or remediation steps.

CVE-2019-19007

Intelbras IWR 3000N 1.8.7 devices allow disclosure of the administrator login name and password because v1/system/user is mishandled, a related issue to CVE-2019-17600...

Intelbras Router RF1200 1.1.3 Cross Site Request Forgery

Exploit Title: Intelbras Router RF1200 1.1.3 - Cross-Site Request Forgery Date: 2019-11-06 Exploit Author: Joas Antonio Vendor Homepage: intelbras.com.br Software Link: https://www.intelbras.com/pt-br/roteador-wireless-smart-dual-band-action-rf-1200 Version: 1.1.3 REQUIRED Tested on: Windows CVE ...

Intelbras Router RF1200 1.1.3 - Cross-Site Request Forgery

Intelbras Router RF1200 1.1.3 - Cross-Site Request Forgery Exploit Title: Intelbras Router RF1200 1.1.3 - Cross-Site Request Forgery Date: 2019-11-06 Exploit Author: Joas Antonio Vendor Homepage: intelbras.com.br Software Link:...

Intelbras Router RF1200 1.1.3 - Cross-Site Request Forgery

Exploit Title: Intelbras Router RF1200 1.1.3 - Cross-Site Request Forgery Date: 2019-11-06 Exploit Author: Joas Antonio Vendor Homepage: intelbras.com.br Software Link: https://www.intelbras.com/pt-br/roteador-wireless-smart-dual-band-action-rf-1200 Version: 1.1.3 REQUIRED Tested on: Windows CVE ...

Intelbras Router RF1200 1.1.3 - Cross-Site Request Forgery Vulnerability

Exploit for hardware platform in category web applications Exploit Title: Intelbras Router RF1200 1.1.3 - Cross-Site Request Forgery Exploit Author: Joas Antonio Vendor Homepage: intelbras.com.br Software Link: https://www.intelbras.com/pt-br/roteador-wireless-smart-dual-band-action-rf-1200...

CVE-2019-19516

Intelbras WRN 150 1.0.18 devices allow CSRF via GO=systempassword.asp to the goform/SysToolChangePwd URI to change a password...

CVE-2019-19516

Intelbras WRN 150 1.0.18 devices allow CSRF via GO=systempassword.asp to the goform/SysToolChangePwd URI to change a password...

Cross site request forgery (csrf)

Intelbras WRN 150 1.0.18 devices allow CSRF via GO=systempassword.asp to the goform/SysToolChangePwd URI to change a password...

CVE-2019-19516

Intelbras WRN 150 1.0.18 devices allow CSRF via GO=systempassword.asp to the goform/SysToolChangePwd URI to change a password...