CVE-2024-22773

Intelbras Action RF 1200 routers 1.2.2 and earlier and Action RG 1200 routers 2.1.7 and earlier expose the Password in Cookie resulting in Login Bypass.
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:intelbras:action_rf_1200_firmware:1.2.2:*:*:*:*:*:*:*
cpe:2.3:h:intelbras:action_rf_1200:-:*:*:*:*:*:*:*

History

29 Apr 2024, 20:15

Type Values Removed Values Added
Summary (en) Intelbras Roteador ACtion RF 1200 1.2.2 esposes the Password in Cookie resulting in Login Bypass. (en) Intelbras Action RF 1200 routers 1.2.2 and earlier and Action RG 1200 routers 2.1.7 and earlier expose the Password in Cookie resulting in Login Bypass.
References
  • () https://www.intelbras.com/en/router-wi-fi-5-dual-band-ac-1200-action-rf-1200 -
  • () https://www.intelbras.com/en/router-wi-fi-5-dual-band-ac-1200-with-giga-port-action-rg-1200 -

13 Feb 2024, 18:16

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 8.1
CWE CWE-922
References () https://www.youtube.com/watch?v=-r0TWJq55DU&t=7s - () https://www.youtube.com/watch?v=-r0TWJq55DU&t=7s - Exploit
References () https://medium.com/%40wagneralves_87750/poc-cve-2024-22773-febf0d3a5433 - () https://medium.com/%40wagneralves_87750/poc-cve-2024-22773-febf0d3a5433 - Exploit
First Time Intelbras action Rf 1200
Intelbras
Intelbras action Rf 1200 Firmware
CPE cpe:2.3:o:intelbras:action_rf_1200_firmware:1.2.2:*:*:*:*:*:*:*
cpe:2.3:h:intelbras:action_rf_1200:-:*:*:*:*:*:*:*

06 Feb 2024, 01:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-02-06 01:15

Updated : 2024-04-29 20:15


NVD link : CVE-2024-22773

Mitre link : CVE-2024-22773

CVE.ORG link : CVE-2024-22773


JSON object : View

Products Affected

intelbras

  • action_rf_1200_firmware
  • action_rf_1200
CWE
CWE-922

Insecure Storage of Sensitive Information