Intelbras vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Latest high and critical flaws

• CVE-2019-25472 IntelBras Telefone IP TIP200 and 200 LITE contain an unauthenticated arbitrary file read vulnerability in the dumpConfigFile function accessible via the cgiServHigh 8.7 · Mar 11, 2026
• CVE-2026-2564 A security flaw has been discovered in Intelbras VIP 3260 Z IA 2.840.00IB005.0.T.Critical 9.2 · Feb 16, 2026
• CVE-2020-36963 Intelbras Router RF 301K firmware version 1.1.2 contains an authentication bypass vulnerability that allows unauthenticated attackers to download router configuHigh 8.7 · Jan 28, 2026
• CVE-2025-55976 Intelbras IWR 3000N 1.9.8 exposes the Wi-Fi password in plaintext via the /api/wireless endpoint.High 8.4 · Sep 10, 2025
• CVE-2025-26065 A cross-site scripting (XSS) vulnerability in Intelbras RX1500 v2.2.9 and RX3000 v1.0.11 allows attackers to execute arbitrary web scripts or HTML via injectingHigh 7.3 · Aug 4, 2025
• CVE-2025-26064 A cross-site scripting (XSS) vulnerability in Intelbras RX1500 v2.2.9 and RX3000 v1.0.11 allows attackers to execute arbitrary web scripts or HTML via injectingHigh 7.3 · Jul 31, 2025
• CVE-2025-26063 An issue in Intelbras RX1500 v2.2.9 and RX3000 v1.0.11 allows unauthenticated attackers to execute arbitrary code via injecting a crafted payload into the ESSIDCritical 9.8 · Jul 31, 2025
• CVE-2025-26062 An access control issue in Intelbras RX1500 v2.2.9 and RX3000 v1.0.11 allows unauthenticated attackers to access the router's settings file and obtain potentialCritical 9.8 · Jul 31, 2025
• CVE-2024-9325 A vulnerability classified as critical has been found in Intelbras InControl up to 2.21.56.High 8.5 · Sep 29, 2024
• CVE-2024-6080 A vulnerability classified as critical was found in Intelbras InControl 2.21.56.High 8.5 · Jun 17, 2024
• CVE-2024-22773 Intelbras Action RF 1200 routers 1.2.2 and earlier and Action RG 1200 routers 2.1.7 and earlier expose the Password in Cookie resulting in Login Bypass.High 8.1 · Feb 5, 2024
• CVE-2023-36144 An authentication bypass in Intelbras Switch SG 2404 MR in firmware 1.00.54 allows an unauthenticated attacker to download the backup file of the device, exposiHigh 7.5 · Jun 30, 2023
• CVE-2022-40005 Intelbras WiFiber 120AC inMesh before 1-1-220826 allows command injection by authenticated users, as demonstrated by the /boaform/formPing6 and /boaform/formTraHigh 8.8 · Dec 25, 2022
• CVE-2022-43308 INTELBRAS SG 2404 MR 20180928-rel64938 allows authenticated attackers to arbitrarily create Administrator accounts via crafted user cookies.High 7.8 · Nov 17, 2022
• CVE-2021-32403 Intelbras Router RF 301K Firmware 1.1.2 is vulnerable to Cross Site Request Forgery (CSRF) due to lack of security mechanisms for token protection and unsafe inHigh 8.8 · May 17, 2021
• CVE-2021-32402 Intelbras Router RF 301K Firmware 1.1.2 is vulnerable to Cross Site Request Forgery (CSRF) due to lack of validation and insecure configurations in inputs and mHigh 8.8 · May 17, 2021
• CVE-2021-3017 The web interface on Intelbras WIN 300 and WRN 342 devices through 2021-01-04 allows remote attackers to discover credentials by reading the def_wirelesspassworHigh 7.5 · Apr 14, 2021
• CVE-2020-24285 INTELBRAS TELEFONE IP TIP200 version 60.61.75.22 allows an attacker to obtain sensitive information through /cgi-bin/cgiServer.exx.High 7.5 · Apr 12, 2021
• CVE-2020-8829 CSRF on Intelbras CIP 92200 devices allows an attacker to access the panel and perform scraping or other analysis.High 8.8 · May 5, 2020
• CVE-2019-19517 Intelbras RF1200 1.1.3 devices allow CSRF to bypass the login.html form, as demonstrated by launching a scrapy process.High 8.8 · May 5, 2020
• CVE-2019-19142 Intelbras WRN240 devices do not require authentication to replace the firmware via a POST request to the incoming/Firmware.cfg URI.High 7.5 · Jan 16, 2020
• CVE-2019-20004 An issue was discovered on Intelbras IWR 3000N 1.8.7 devices.High 8.8 · Jan 5, 2020
• CVE-2019-19996 An issue was discovered on Intelbras IWR 3000N 1.8.7 devices.High 7.5 · Dec 26, 2019
• CVE-2019-19995 A CSRF issue was discovered on Intelbras IWR 3000N 1.8.7 devices, leading to complete control of the router, as demonstrated by v1/system/user.High 8.8 · Dec 26, 2019
• CVE-2019-19007 Intelbras IWR 3000N 1.8.7 devices allow disclosure of the administrator login name and password because v1/system/user is mishandled, a related issue to CVE-201High 7.2 · Dec 5, 2019