Persistent XSS Vulnerability in Intelbras Wireless N 150Mbps Router
CVE-2017-14219

6.1MEDIUM

Key Information:

Vendor
Intelbras
Status
Wrn 240 Firmware
Vendor
CVE Published:
7 September 2017

Summary

A persistent XSS vulnerability exists in the Intelbras Wireless N 150Mbps router with firmware WRN 240, which enables remote attackers to steal wireless credentials through a crafted ESSID. This vulnerability affects web pages accessed via the device’s management interface, specifically userRpm/popupSiteSurveyRpm.htm and userRpm/WlanSecurityRpm.htm, which can be exploited without prior network access.

References

https://www.exploit-db.com/exploits/42633/
exploitx_refsource_EXPLOIT-DB
http://whiteboyz.xyz/xss-roteador-intelbras-wrn-240.html
x_refsource_MISC

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.