CVE-2023-36144
HighCVSS 7.5Exploitation Probability (EPSS)
Very high risk98th percentile - higher than 98% of all known CVEs
Summary
An authentication bypass vulnerability in Intelbras Switch SG 2404 MR with firmware version 1.00.54 allows an unauthenticated attacker to download the device's backup file, exposing critical configuration information.
Risk Assessment
The risk involves potential exposure of sensitive configuration data, such as passwords and network settings, which could enable further attacks on the network infrastructure.
Recommendation
It is recommended to immediately update the switch firmware to the latest available version and restrict management interface access to trusted IP addresses only.
Original NVD description (English source)
An authentication bypass in Intelbras Switch SG 2404 MR in firmware 1.00.54 allows an unauthenticated attacker to download the backup file of the device, exposing critical information about the device configuration.