CVE-2019-19516

CVE-2019-19516 affects Intelbras WRN 150 firmware 1.0.18. The vulnerability is a CSRF flaw in the web admin UI that lets an attacker change the administrator password by forging a request to the URI goform/SysToolChangePwd with GO=system_password.asp. The issue is widely reported across sources (...

CVE-2017-14942

CVE-2017-14942 affects the Intelbras WRN 150 router. The issue is an authentication bypass via cookie manipulation: an attacker can force a direct request to cgi-bin/DownloadCfg/RouterCfm.cfg using an admin:language cookie to read the router’s configuration file. This exposes credentials and sens...

CVE-2019-17222

The CVE-2019-17222 entry concerns Intelbras WRN 150 devices (version 1.0.17) with a stored XSS in the WAN configuration Service Name tab that leads to a denial of service (inability to change the configuration). Public details from NVD provide CVSS v2 base score 4.3 (NETWORK, MEDIUM) and CVSS v3....