CVE Catalog
CVE-2017-14942
CriticalSummary
Intelbras WRN 150 devices allow remote attackers to read the configuration file, enabling authentication bypass via a direct request to cgi-bin/DownloadCfg/RouterCfm.cfg containing an admin:language=pt cookie.
Risk Assessment
Attackers may gain access to sensitive configuration information, potentially leading to further attacks on the network or devices.
Recommendation
It is recommended to update devices to the latest firmware version and restrict access to configuration files.
Original NVD description (English source)
Intelbras WRN 150 devices allow remote attackers to read the configuration file, and consequently bypass authentication, via a direct request for cgi-bin/DownloadCfg/RouterCfm.cfg containing an admin:language=pt cookie.