Intelbras Action RF 1200 routers 1.2.2 and earlier and Action RG 1200 routers 2.1.7 and earlier expose the Password in Cookie resulting in Login Bypass.
Weakness
The product stores sensitive information without properly limiting read or write access by unauthorized actors.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Action_rf_1200_firmware | Intelbras | 1.2.2 (including) | 1.2.2 (including) |
References
- https://medium.com/%40wagneralves_87750/poc-cve-2024-22773-febf0d3a5433
- https://www.intelbras.com/en/router-wi-fi-5-dual-band-ac-1200-action-rf-1200
- https://www.intelbras.com/en/router-wi-fi-5-dual-band-ac-1200-with-giga-port-action-rg-1200
- https://www.youtube.com/watch?v=-r0TWJq55DU\u0026t=7s
- https://medium.com/%40wagneralves_87750/poc-cve-2024-22773-febf0d3a5433
- https://www.intelbras.com/en/router-wi-fi-5-dual-band-ac-1200-action-rf-1200
- https://www.intelbras.com/en/router-wi-fi-5-dual-band-ac-1200-with-giga-port-action-rg-1200
- https://www.youtube.com/watch?v=-r0TWJq55DU\u0026t=7s