CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

24 matches found

NVD•added 2018/05/15 7:29 p.m.•21 views

CVE-2018-11094

An issue was discovered on Intelbras NCLOUD 300 1.0 devices. /cgi-bin/ExportSettings.sh, /goform/updateWPS, /goform/RebootSystem, and /goform/vpnBasicSettings do not require authentication. For example, when an HTTP POST request is made to /cgi-bin/ExportSettings.sh, the username, password, and...

10CVSS9.4AI score0.34441EPSS

SaveExploits5References2

OSV•added 2018/05/15 7:29 p.m.•8 views

CVE-2018-11094

9.8CVSS5.8AI score0.34441EPSS

SaveExploits5References2

CVE•added 2018/05/15 7:0 p.m.•62 views

CVE-2018-11094

CVE-2018-11094 — Intelbras NCLOUD 300 1.0 Authentication bypass . Public sources describe endpoints that do not require authentication: /cgi-bin/ExportSettings.sh, /goform/updateWPS, /goform/RebootSystem, and /goform/vpnBasicSettings. An HTTP POST to /cgi-bin/ExportSettings.sh can disclose the we...

10CVSS9.3AI score0.34441EPSS

SaveExploits5References2Affected Software1

Cvelist•added 2018/05/15 7:0 p.m.•29 views

CVE-2018-11094

9.5AI score0.34441EPSS

SaveExploits5References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by