CVE-2023-36144

HIGHNuclei

intelbras sg_2404_mr_firmware Missing Authorization

Title source: VulnCheck
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2023-36144 has a selected CVSS score of 7.5 (high); EIP currently links 1 repository PoC and 1 Nuclei template.

Description

An authentication bypass in Intelbras Switch SG 2404 MR in firmware 1.00.54 allows an unauthenticated attacker to download the backup file of the device, exposing critical information about the device configuration.

Description source: CVE List

Exploitation context

Known exploitation

VulnCheck KEV
Listed · May 9, 2025 · VulnCheck
Reported exploitation
Observed · VulnCheck

Available material

Repository PoCs
1
Nuclei templates
1

CISA SSVC decision

ExploitationPoC
AutomatableYes
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Nov 27, 2024 · Source: CVE List

Affected products and versions

2
ProductSourceVersion range

sg_2404_mr

Browse intelbras / sg_2404_mr

Default status: unknown

CVE List1.00.54affected

sg_2404_mr_firmware

Browse intelbras / sg_2404_mr_firmware
VulnCheckVersion data not supplied

Proofs of concept

1

Repository PoCs

GitHubleonardobg/CVE-2023-36144Repository PoCby leonardobg1Not analyzed1 file

388 B

GitHub
PoC details

Nuclei templates

1
ProjectDiscoveryHIGHIntelbras Switch - Information DisclosureCVSS 7.5

An authentication bypass in Intelbras Switch SG 2404 MR in firmware 1.00.54 allows an unauthenticated attacker to download the backup file of the device, exposing critical information about the device configuration.

Impact

Unauthenticated attackers can exploit authentication bypass to download backup configuration files containing critical device information including credentials and network configuration from Intelbras Switch devices.

Remediation

Apply the latest security patches or updates provided by the vendor to mitigate this vulnerability.

WeaknessesCWE-862
Authorsgy741
Template tagscve2023cveintelbrasswitchexposurevkevvuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CPE: cpe:2.3:o:intelbras:sg_2404_mr_firmware:1.00.54:*:*:*:*:*:*:*
Shodan: title:"Intelbras"
Shodan: http.title:"intelbras"
FOFA: title="intelbras"
Google: intitle:"intelbras"
https://nvd.nist.gov/vuln/detail/CVE-2023-36144 https://github.com/leonardobg/CVE-2023-36144 http://intelbras.com/ https://github.com/nomi-sec/PoC-in-GitHub

Source: ProjectDiscovery

References

3