Browse CVEs

HIGH 8.8 CVE-2019-19995 A CSRF issue was discovered on Intelbras IWR 3000N 1.8.7 devices, leading to complete control of the router, as demonstrated by v1/system/user. Iwr 3000n Firmware Mitigation only Fix from $1,9502019-12-26 HIGH 7.5 CVE-2019-19996 An issue was discovered on Intelbras IWR 3000N 1.8.7 devices. A malformed login request allows remote attackers to cause a denial of service (reboot)… Iwr 3000n Firmware Mitigation only Fix from $1,9502019-12-26 HIGH 7.2 CVE-2019-19007 Intelbras IWR 3000N 1.8.7 devices allow disclosure of the administrator login name and password because v1/system/user is mishandled, a related issue… Iwr 3000n Firmware Mitigation only Fix from $1,9502019-12-05 MEDIUM 6.5 CVE-2019-19516EPSS 10% Intelbras WRN 150 1.0.18 devices allow CSRF via GO=system_password.asp to the goform/SysToolChangePwd URI to change a password. Wrn 150 Firmware No fix yet Fix from $1,6002019-12-02 MEDIUM 6.1 CVE-2019-17222 An issue was discovered on Intelbras WRN 150 1.0.17 devices. There is stored XSS in the Service Name tab of the WAN configuration screen, leading to … Wrn 150 Firmware No fix yet Fix from $1,6002019-11-07 CRITICAL 9.8 CVE-2019-17600 Intelbras IWR 1000N 1.6.4 devices allow disclosure of the administrator login name and password because v1/system/user is mishandled. Iwr 1000n Firmware No fix yet Fix from $2,3002019-10-15 HIGH 8.8 CVE-2019-11414 An issue was discovered on Intelbras IWR 3000N 1.5.0 devices. When the administrator password is changed from a certain client IP address, administra… Iwr 3000n Firmware No fix yet Fix from $1,9502019-04-22 HIGH 8.8 CVE-2019-11416 A CSRF issue was discovered on Intelbras IWR 3000N 1.5.0 devices, leading to complete control of the router, as demonstrated by v1/system/user. Iwr 3000n Firmware No fix yet Fix from $1,9502019-04-22 HIGH 7.5 CVE-2019-11415EPSS 14% An issue was discovered on Intelbras IWR 3000N 1.5.0 devices. A malformed login request allows remote attackers to cause a denial of service (reboot)… Iwr 3000n Firmware No fix yet Fix from $1,9502019-04-22 MEDIUM 6.1 CVE-2018-17337 Intelbras NPLUG 1.0.0.14 devices have XSS via a crafted SSID that is received via a network broadcast. Nplug Firmware No fix yet Fix from $1,6002018-10-10 HIGH 8.8 CVE-2018-12456 Intelbras NPLUG 1.0.0.14 wireless repeater devices have no CSRF token protection in the web interface, allowing attackers to perform actions such as … Nplug Firmware No fix yet Fix from $1,9502018-10-10 HIGH 8.1 CVE-2018-12455EPSS 6% Intelbras NPLUG 1.0.0.14 wireless repeater devices have a critical vulnerability that allows an attacker to authenticate in the web interface just by… Nplug Firmware No fix yet Fix from $1,9502018-10-10 CRITICAL 9.8 CVE-2018-10369 A Cross-site scripting (XSS) vulnerability was discovered on Intelbras Win 240 V1.1.0 devices. An attacker can change the Admin Password without a Lo… Win 240 Firmware Mitigation only Fix from $2,3002018-08-15 CRITICAL 9.8 CVE-2018-11094EPSS 34% An issue was discovered on Intelbras NCLOUD 300 1.0 devices. /cgi-bin/ExportSettings.sh, /goform/updateWPS, /goform/RebootSystem, and /goform/vpnBasi… Ncloud 300 Firmware No fix yet Fix from $2,3002018-05-15 HIGH 7.2 CVE-2018-9010EPSS 10% Intelbras TELEFONE IP TIP200/200 LITE 60.0.75.29 devices allow remote authenticated admins to read arbitrary files via the /cgi-bin/cgiServer.exx pag… Tip200 Firmware No fix yet Fix from $1,9502018-03-25 CRITICAL 9.8 CVE-2017-14942EPSS 61% Intelbras WRN 150 devices allow remote attackers to read the configuration file, and consequently bypass authentication, via a direct request for cgi… Wrn 150 Firmware No fix yet Fix from $2,3002017-09-30 MEDIUM 6.1 CVE-2017-14219 XSS (persistent) on the Intelbras Wireless N 150Mbps router with firmware WRN 240 allows attackers to steal wireless credentials without being connec… Wrn 240 Firmware No fix yet Fix from $1,6002017-09-07