Vulnerabilities

TI-2019-14058 CVE-2019-19516 · GHSA-h4vc-wv6x-gx67

Intelbras WRN 150 1.0.18 devices allow CSRF via GO=system_password.asp to the…

MEDIUM 41

Intelbras WRN 150 1.0.18 devices allow CSRF via GO=system_password.asp to the goform/SysToolChangePwd URI to change a password.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.09632 Published 2019-12-02 No fix listed CWE-352

TI-2019-12840 CVE-2019-17222 · GHSA-jprx-vc9q-7xx9

An issue was discovered on Intelbras WRN 150 1.0.17 devices.

LOW 28

An issue was discovered on Intelbras WRN 150 1.0.17 devices.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00686 Published 2019-11-07 No fix listed CWE-79

TI-2017-10965 CVE-2017-14942 · GHSA-wrw5-8cw7-5jm9

Intelbras WRN 150 devices allow remote attackers to read the configuration file, and…

HIGH 77

Intelbras WRN 150 devices allow remote attackers to read the configuration file, and consequently bypass authentication, via a direct request for cgi-bin/DownloadCfg/RouterCfm.cfg containing an admin:language=pt cookie.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.60857 Published 2017-09-29 No fix listed CWE-552

Vulnerabilities

Filters

Intelbras WRN 150 1.0.18 devices allow CSRF via GO=system_password.asp to the…

An issue was discovered on Intelbras WRN 150 1.0.17 devices.

Intelbras WRN 150 devices allow remote attackers to read the configuration file, and…