Denial of Service Vulnerability in Intelbras IWR 3000N Devices
CVE-2019-19996

7.5HIGH

Key Information:

Vendor

Intelbras

Status
Iwr 3000n Firmware
Vendor
CVE Published:
26 December 2019

What is CVE-2019-19996?

A vulnerability in Intelbras IWR 3000N devices, specifically version 1.8.7, can be exploited by remote attackers through a malformed login request. This flaw enables attackers to initiate a denial of service condition that causes the device to reboot. The exploitation is facilitated by the JSON misparsing of the malformed string when attempting to log in, leading to service disruption. Users should apply recommended security measures to protect against potential threats.

References

https://medium.com/%40rsantos_14778/dos-cve-2019-19996-5a...
x_refsource_MISC

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.