Description
Intelbras Router RF 301K firmware version 1.1.2 contains an authentication bypass vulnerability that allows unauthenticated attackers to download router configuration files. Attackers can send a specific HTTP GET request to /cgi-bin/DownloadCfg/RouterCfm.cfg to retrieve sensitive router configuration without authentication.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Intelbras | Intelbras Router RF 301K | firmware version 1.1.2 | — |
References
- ExploitDB-49126 exploit
- Intelbras Official Homepage product
- VulnCheck Advisory: Intelbras Router RF 301K 1.1.2 - Authentication Bypass third-party-advisory