Description
Intelbras Router RF 301K firmware version 1.1.2 contains an authentication bypass vulnerability that allows unauthenticated attackers to download router configuration files. Attackers can send a specific HTTP GET request to /cgi-bin/DownloadCfg/RouterCfm.cfg to retrieve sensitive router configuration without authentication.
Problem types
Missing Authentication for Critical Function
Product status
Credits
Kaio Amaral
References
www.exploit-db.com/exploits/49126
www.exploit-db.com/exploits/49126 (ExploitDB-49126)
www.intelbras.com/pt-br/ (Intelbras Official Homepage)
www.vulncheck.com/...lbras-router-rf-k-authentication-bypass (VulnCheck Advisory: Intelbras Router RF 301K 1.1.2 - Authentication Bypass)