CVE-2021-32403

HIGH

Intelbras RF 301k Firmware - CSRF

Title source: rule

Description

Intelbras Router RF 301K Firmware 1.1.2 is vulnerable to Cross Site Request Forgery (CSRF) due to lack of security mechanisms for token protection and unsafe inputs and modules.

Exploits (1)

exploitdb WORKING POC

by Rodolfo Mariano · htmlwebappshardware

https://www.exploit-db.com/exploits/49969

View Code ZIP pw:eip

References (2)

[Exploit, Third Party Advisory, VDB Entry] http://packetstormsecurity.com/files/163023/Intelbras-Router-RF-301K-Cross-Site-Request-Forgery.html

[Exploit, Third Party Advisory] https://www.youtube.com/watch?v=1Ed-2xBFG3M

Scores

CVSS v3 8.8

EPSS 0.0053

EPSS Percentile 67.4%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE

CWE-352

Status published

Products (1)

intelbras/rf_301k_firmware 1.1.2

Published May 17, 2021

Tracked Since Feb 18, 2026