CVE-2023-36144
HIGH EXPLOITED NUCLEIIntelbras Switch SG 2404 MR - Auth Bypass
Title source: llmExploitation Summary
CVE-2023-36144 has been observed exploited in the wild (reported by VulnCheck KEV). EIP tracks 1 public exploit from researchers including leonardobg. A Nuclei detection template is also available.
AI-analyzed exploit summary This PoC demonstrates an unauthenticated information disclosure vulnerability in Intelbras Switch SG 2404 MR L2+ firmware 1.00.54. It allows an attacker to download a backup file containing device configurations, users, and hashed passwords via a direct HTTP request.
Description
An authentication bypass in Intelbras Switch SG 2404 MR in firmware 1.00.54 allows an unauthenticated attacker to download the backup file of the device, exposing critical information about the device configuration.
Exploits (1)
This PoC demonstrates an unauthenticated information disclosure vulnerability in Intelbras Switch SG 2404 MR L2+ firmware 1.00.54. It allows an attacker to download a backup file containing device configurations, users, and hashed passwords via a direct HTTP request.
Nuclei Templates (1)
title:"Intelbras" || http.title:"intelbras"
title="intelbras"
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N