Authentication Bypass Vulnerability in Intelbras WRN240 Devices

CVE-2019-19142

Summary

The Intelbras WRN240 devices are susceptible to an authentication bypass vulnerability that allows unauthorized users to replace the firmware without needing authentication. This major flaw can lead to significant security risks, including potential control over the device and exploitation of sensitive data. Attackers can exploit this vulnerability by sending a POST request to the Firmware.cfg URI, enabling them to modify the device firmware at will without any authentication checks.

References