CVE-2026-3101

MEDIUM

Intelbras TIP 635G 1.12.3.5 - Command Injection

Title source: llm

Description

A vulnerability was found in Intelbras TIP 635G 1.12.3.5. This vulnerability affects unknown code of the component Ping Handler. The manipulation results in os command injection. The attack can be executed remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.

References (4)

[Permissions Required, VDB Entry] https://vuldb.com/?ctiid.347527

[Permissions Required, VDB Entry] https://vuldb.com/?id.347527

[Permissions Required, VDB Entry] https://vuldb.com/?submit.757986

[Various Sources] https://www.notion.so/eldruin/Intelbras-TIP-635G-Authenticated-OS-Command-Injection-Leading-to-Root-RCE-30627474cccb80929328e7c3b3ea0f9b

Scores

CVSS v3 6.3

EPSS 0.0048

EPSS Percentile 64.5%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Classification

CWE

CWE-78 CWE-77

Status published

Affected Products (1)

intelbras/tip_635g_firmware

Timeline

Published Feb 24, 2026

Tracked Since Feb 24, 2026