11 matches found
CVE-2023-36144
CVE-2023-36144 CVE-2023-36144 PoC - Intelbras Switch SG 2404 MR L2+ 펌웨어 1.00.54 인증 없이 백업 파일 다운로드 재현 단계: 1. 다음 링크로 이동: http://127.0.0.1/cgi-bin/exportCfgwithpasswd 127.0.0.1을 장치 IP로 교체 2. 백업 파일이 자동으로 다운로드되며, 여기에는 장치 구성과 사용자 및 해시된 비밀번호가 포함되어 있습니다...
EUVD-2022-46348
Malicious code in bioql PyPI...
CVE-2022-43308
INTELBRAS SG 2404 MR 20180928-rel64938 allows authenticated attackers to arbitrarily create Administrator accounts via crafted user cookies...
CVE-2023-36144
An authentication bypass in Intelbras Switch SG 2404 MR in firmware 1.00.54 allows an unauthenticated attacker to download the backup file of the device, exposing critical information about the device configuration...
Intelbras SG 2404 MR 安全漏洞
The Intelbras SG 2404 MR is a switch with network management capabilities from Intelbras of Brazil. A security vulnerability exists in the Intelbras SG 2404 MR version 1.00.54, which stems from an authentication bypass that allows an unauthenticated attacker to download a backup file of the devic...
Code injection
INTELBRAS SG 2404 MR 20180928-rel64938 allows authenticated attackers to arbitrarily create Administrator accounts via crafted user cookies...
CVE-2022-43308
Intelbras SG 2404 MR firmware 20180928-rel64938 is affected by CVE-2022-43308. An authenticated attacker can arbitrarily create Administrator accounts via crafted user cookies, enabling full admin access. CVSSv3.1 metrics in the provided records indicate a HIGH impact (C/H/I/A) with LOCAL attack ...
CVE-2022-43308
INTELBRAS SG 2404 MR 20180928-rel64938 allows authenticated attackers to arbitrarily create Administrator accounts via crafted user cookies...
CVE-2022-43308: Improper Privilege Management
INTELBRAS SG 2404 MR 20180928-rel64938 allows authenticated attackers to arbitrarily create Administrator accounts via crafted user cookies...
PT-2022-26841 · Intelbras · Intelbras Sg 2404 Mr
Name of the Vulnerable Software and Affected Versions: INTELBRAS SG 2404 MR version 20180928-rel64938 Description: The issue allows authenticated attackers to create Administrator accounts arbitrarily through crafted user cookies. Recommendations: For version 20180928-rel64938, consider restricti...