Read the docs
TI-2026-87008 Aliases CVE-2026-124577

Improper authentication in Intelbras SG 2404 PoE L2+ web interface

Priority MEDIUM 55CWE-287Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
Security bypass
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-287.

Summary

Intelbras SG 2404 PoE L2+ versions 1.00.70 and 1.00.72 contain an improper authentication flaw (CWE-287) in the web management interface. A remote attacker with no privileges or user interaction can trigger improper authentication by manipulating the /EXCU_SHELL file. A public exploit has been made available.

Written with Claude Haiku 5.5 from the sources below · 2026-11-09

Description from the CNA

A weakness has been identified in Intelbras SG 2404 PoE L2+ 1.00.70/1.00.72. The affected element is an unknown function of the file /EXCU_SHELL of the component Web Management Interface. Executing a manipulation can lead to improper authentication. The attack can be launched remotely. The exploit has been made available to the public and could be used for attacks. Upgrading to version 1.00.74 is sufficient to fix this issue. Upgrading the affected component is advised.

Why it matters now

Fix Fixed SG 2404 PoE L2+ (Intelbras): 1.00.74

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
IntelbrasSG 2404 PoE L2+1.00.70; 1.00.721.00.74Patch availableCNA
  • SG 2404 PoE L2+ VendorIntelbras Affected 1.00.70; 1.00.72 Fixed in 1.00.74 Patch available CNA

CPE names CNA · 1

CPEVersionsRoleVendor
cpe:2.3:h:intelbras:sg_2404_poe_l2_:*:*:*:*:*:*:*:*——Intelbras
  • cpe:2.3:h:intelbras:sg_2404_poe_l2_:*:*:*:*:*:*:*:* Versions — — ·Intelbras

Remediation

Upgrade Intelbras SG 2404 PoE L2+ to version 1.00.74, which fixes this issue.

Written with Claude Haiku 5.5 from the sources below · 2026-11-09

  • Fix · CNA SG 2404 PoE L2+ (Intelbras) Fixed in 1.00.74

Timeline

  1. 2026-11-09 Threatist record created from CVE-2026-124577

References

—

  • TI-2025-19238 An issue in Intelbras RX1500 v2.2.9 and RX3000 v1.0.11 allows unauthenticated attackers… CVSS 3.1CRITICAL 9.8
  • TI-2025-19237 An access control issue in Intelbras RX1500 v2.2.9 and RX3000 v1.0.11 allows… CVSS 3.1CRITICAL 9.8
  • TI-2020-19098 Intelbras Router RF 301K 1.1.2 - Authentication Bypass CVSS 4.0HIGH 8.7
  • TI-2019-15525 IntelBras Telefone IP TIP200/200 LITE Arbitrary File Read via dumpConfigFile CVSS 4.0HIGH 8.7
  • TI-2017-10965 Intelbras WRN 150 devices allow remote attackers to read the configuration file, and… CVSS 3.0CRITICAL 9.8
  • TI-2022-18943 Intelbras WiFiber 120AC inMesh before 1-1-220826 allows command injection by… CVSS 3.1HIGH 8.8
See all 60 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences