CVE-2023-6103

The CVE-2023-6103 entry applies to Intelbras RX 1500 firmware 1.1.9, affecting the SSID Handler component, specifically the /WiFi.html file. The vulnerability enables cross-site scripting (XSS) and can be exploited remotely. Multiple sources confirm the issue and public disclosure (VDB-245065); v...

CVE-2025-26065

The Intelbras RX1500 (v2.2.9) and RX3000 (v1.0.11) routers are affected by a cross-site scripting (XSS) vulnerability. The root cause is the improper neutralization of input during web page generation, specifically allowing an attacker to inject a crafted payload into the name of a visiting Wi-Fi...

CVE-2025-50404

The Intelbras RX1500 Router (versions v2.2.17 and before ) is vulnerable to an Integer Overflow in the websReadEvent() function. The issue arises because the function incorrectly uses the int type when processing the "command" field of the HTTP header, leading to an array boundary crossing and ov...

CVE-2025-26064

The Intelbras RX1500 (v2.2.9) and RX3000 (v1.0.11) routers are affected by a cross-site scripting (XSS) vulnerability in their web management interfaces. The root cause is a lack of sufficient measures to protect the web page structure, specifically due to unvalidated connected device names . An ...

CVE-2025-26063

The Intelbras RX1500 (v2.2.9) and RX3000 (v1.0.11) routers are vulnerable to arbitrary code execution due to a lack of proper neutralization of special elements when processing ESSID identifiers . An unauthenticated remote attacker can exploit this by sending a specially crafted POST request to t...

CVE-2025-26062

An improper access control issue exists in the Intelbras RX1500 (v2.2.9) and RX3000 (v1.0.11) routers. This vulnerability allows unauthenticated attackers to access the router's settings file, which may contain potentially sensitive information from the current configuration. To mitigate this ris...

CVE-2025-50405

The Intelbras RX1500 Router (versions v2.2.17 and before ) is susceptible to a vulnerability caused by incorrect access control within the FirmwareUpload() and GetFirmwareValidation() functions. An attacker exploiting this flaw could gain unauthorized access to protected information and execute a...