Remote Credential Exposure Flaw in Intelbras Routers
CVE-2021-3017

7.5HIGH

Key Information:

Vendor

Intelbras

Status
Win 300 Firmware
Vendor
CVE Published:
14 April 2021

What is CVE-2021-3017?

The web interface of Intelbras WIN 300 and WRN 342 devices exposes sensitive credentials, allowing remote attackers to read the def_wirelesspassword line from the HTML source code. This vulnerability can lead to unauthorized access to network configurations, compromising device security. Users should take necessary precautions to secure their devices and monitor for any unusual activities.

References

https://www.intelbras.com/pt-br/ajuda-download/faq/rotead...
x_refsource_MISC
https://pastebin.com/cTYTf0Yn
x_refsource_MISC

EPSS Score

68% chance of being exploited in the next 30 days.

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.