CVE-2019-19516

CVE-2019-19516 affects Intelbras WRN 150 firmware 1.0.18. The vulnerability is a CSRF flaw in the web admin UI that lets an attacker change the administrator password by forging a request to the URI goform/SysToolChangePwd with GO=system_password.asp. The issue is widely reported across sources (...

CVE-2017-14942

CVE-2017-14942 affects the Intelbras WRN 150 router. The issue is an authentication bypass via cookie manipulation: an attacker can force a direct request to cgi-bin/DownloadCfg/RouterCfm.cfg using an admin:language cookie to read the router’s configuration file. This exposes credentials and sens...