CVE-2024-22773

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-22773
Intelbras Action RF 1200 routers 1.2.2 and earlier and Action RG 1200 routers 2.1.7 and earlier expose the Password in Cookie resulting in Login Bypass.

8.1 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 2.2 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://medium.com/%40wagneralves_87750/poc-cve-2024-22773-febf0d3a5433 Exploit
https://www.intelbras.com/en/router-wi-fi-5-dual-band-ac-1200-action-rf-1200
https://www.intelbras.com/en/router-wi-fi-5-dual-band-ac-1200-with-giga-port-action-rg-1200
https://www.youtube.com/watch?v=-r0TWJq55DU&t=7s Exploit
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:intelbras:action_rf_1200_firmware:1.2.2:*:*:*:*:*:*:*
cpe:2.3:h:intelbras:action_rf_1200:-:*:*:*:*:*:*:*
History

29 Apr 2024, 20:15

Type Values Removed Values Added
References
  • () https://www.intelbras.com/en/router-wi-fi-5-dual-band-ac-1200-action-rf-1200 -
  • () https://www.intelbras.com/en/router-wi-fi-5-dual-band-ac-1200-with-giga-port-action-rg-1200 -
Summary (en) Intelbras Roteador ACtion RF 1200 1.2.2 esposes the Password in Cookie resulting in Login Bypass. (en) Intelbras Action RF 1200 routers 1.2.2 and earlier and Action RG 1200 routers 2.1.7 and earlier expose the Password in Cookie resulting in Login Bypass.

13 Feb 2024, 18:16

Type Values Removed Values Added
CPE cpe:2.3:o:intelbras:action_rf_1200_firmware:1.2.2:*:*:*:*:*:*:*
cpe:2.3:h:intelbras:action_rf_1200:-:*:*:*:*:*:*:*
CWE CWE-922
First Time Intelbras action Rf 1200 Firmware
Intelbras action Rf 1200
Intelbras
References () https://medium.com/%40wagneralves_87750/poc-cve-2024-22773-febf0d3a5433 - () https://medium.com/%40wagneralves_87750/poc-cve-2024-22773-febf0d3a5433 - Exploit
References () https://www.youtube.com/watch?v=-r0TWJq55DU&t=7s - () https://www.youtube.com/watch?v=-r0TWJq55DU&t=7s - Exploit
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 8.1

06 Feb 2024, 13:53

Type Values Removed Values Added
Summary
  • (es) Intelbras Roteador ACtion RF 1200 1.2.2 introduce la Contraseña en Cookie, lo que resulta en Omisión de Inicio de Sesión.

06 Feb 2024, 01:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-02-06 01:15

Updated : 2024-04-29 20:15

NVD link : CVE-2024-22773

Mitre link : CVE-2024-22773

CVE.ORG link : CVE-2024-22773

JSON object : View

Products Affected

intelbras

  • action_rf_1200
  • action_rf_1200_firmware
CWE
CWE-922

Insecure Storage of Sensitive Information