Vulnerabilities > Intelbras
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2018-05-15 | CVE-2018-11094 | Use of Hard-coded Credentials vulnerability in Intelbras Ncloud 300 Firmware 1.0 An issue was discovered on Intelbras NCLOUD 300 1.0 devices. | 10.0 |
| 2018-03-25 | CVE-2018-9010 | Path Traversal vulnerability in Intelbras Tip200 Firmware and Tip200Lite Firmware Intelbras TELEFONE IP TIP200/200 LITE 60.0.75.29 devices allow remote authenticated admins to read arbitrary files via the /cgi-bin/cgiServer.exx page parameter, aka absolute path traversal. | 4.0 |
| 2017-09-30 | CVE-2017-14942 | Files or Directories Accessible to External Parties vulnerability in Intelbras WRN 150 Firmware 1.0.1 Intelbras WRN 150 devices allow remote attackers to read the configuration file, and consequently bypass authentication, via a direct request for cgi-bin/DownloadCfg/RouterCfm.cfg containing an admin:language=pt cookie. | 9.8 |
| 2017-09-07 | CVE-2017-14219 | Cross-site Scripting vulnerability in Intelbras WRN 240 Firmware XSS (persistent) on the Intelbras Wireless N 150Mbps router with firmware WRN 240 allows attackers to steal wireless credentials without being connected to the network, related to userRpm/popupSiteSurveyRpm.htm and userRpm/WlanSecurityRpm.htm. | 6.1 |