Unauthenticated Wi-Fi Password Exposure in Intelbras Router

CVE-2025-55976

What is CVE-2025-55976?

The Intelbras IWR 3000N version 1.9.8 is susceptible to a serious security flaw that allows any user within the local network to access the Wi-Fi password in plaintext. This vulnerability is present via the /api/wireless endpoint, which permits unauthenticated queries, thereby exposing sensitive network credentials that, if exploited, could result in unauthorized network access and potential data compromise. Securing this router's configuration is crucial to preventing unauthorized access and ensuring network security.

References