Administrative Control Flaw in Intelbras IWR 3000N Router

CVE-2019-11414

Summary

A security flaw has been identified in the Intelbras IWR 3000N 1.5.0 devices. When an administrator changes the router's password from a specific client IP address, the router fails to properly revoke administrative access for that IP address. This oversight allows any client operating from the same address to maintain unrestricted control over the router, posing significant security risks. Immediate attention to this issue is necessary to prevent unauthorized access to sensitive administrative functions.

References