CVE-2017-14942 Intelbras WRN 150 devices allow remote attackers to read the configuration file, and consequently bypass authentication, via a direct request for cgi-bin/DownloadCfg/RouterCfm.cfg containing an admin:...
CriticalCVSS 9.8
EPSS 60.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Intelbras WRN 150 devices allow remote attackers to read the configuration file, and consequently bypass authentication, via a direct request for cgi-bin/DownloadCfg/RouterCfm.cfg containing an admin:language=pt cookie.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| intelbras wrn 150 firmware | = 1.0.1 | No fix listed |
References
- whiteboyz.xyz exploit url-repurposed
- 42916 exploit third-party-advisory vdb-entry