Access Control Weakness in Intelbras RX1500 and RX3000 Routers
CVE-2025-26062

9.8CRITICAL

Key Information:

Vendor

Intelbras

Status
RX1500 and RX3000 routers
Vendor
CVE Published:
31 July 2025

What is CVE-2025-26062?

An access control issue in the Intelbras RX1500 (v2.2.9) and RX3000 (v1.0.11) routers permits unauthenticated attackers to gain access to the router's settings file. This vulnerability can lead to the exposure of sensitive configuration information, potentially compromising the security of the device. Users are advised to review their device configurations and apply necessary security measures to mitigate risks associated with unauthorized access.

References

https://manuais.intelbras.com.br/manual-linha-rx/ChangeLo...
https://manuais.intelbras.com.br/manual-linha-rx/ChangeLo...
https://seclists.org/fulldisclosure/2025/Jul/14

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.