Intelbras

26 CVEs across 69 Intelbras products. Browse Intelbras vulnerabilities, severities, and proof-of-concept exploits.

Intelbras products with known CVEs

ProductCVEs
Incontrol8
Iwr 3000n8
Iwr 3000n Firmware8
Incontrol Web7
Rx 15007
Rx 1500 Firmware7
Rx 30004
Rx 3000 Firmware4
Tip2004
Tip200 Firmware4
Tip200lite4
Tip200lite Firmware4
Nplug3
Nplug Firmware3
Wrn 1503
Wrn 150 Firmware3
Action Rf 12002
Action Rf 1200 Firmware2
Rf 301k2
Rf 301k Firmware2
Sg 2404 Mr2
Sg 2404 Mr Firmware2
Tip3002
Tip300 Firmware2
Vip S3020 G22
Vip S4020 G22
Vip S4020 G32
Vip S4320 G22
Wrn 2402
Wrn 240 Firmware2
Ata 2001
Ata 200 Firmware1
Cip 922001
Cip 92200 Firmware1
Hdcvi 10081
Hdcvi 10161
Icip1
Icip 301
Icip 30 Firmware1
Intelbras Router Rf 301k1
Invu 7016 Ft1
Iwr 1000n1
Iwr 1000n Firmware1
Mhdx 10041
Mhdx 10081
Mhdx 10161
Mhdx 50161
Ncloud 3001
Ncloud 300 Firmware1
Rf 301k1
Intelbras CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-12211Low2.72026-06-15A flaw has been found in Intelbras iNVU 7016 FT 3.004.00IB000.0.T Build 2025-09-26. This impacts an unknown function of the file /RPC2_Loadfile/syslog/ of the…
CVE-2019-25472High7.52026-03-11IntelBras Telefone IP TIP200 and 200 LITE contain an unauthenticated arbitrary file read vulnerability in the dumpConfigFile function accessible via the cgiSer…
CVE-2026-3101Medium6.32026-02-24A vulnerability was found in Intelbras TIP 635G 1.12.3.5. This vulnerability affects unknown code of the component Ping Handler. The manipulation results in os…
CVE-2026-2564High8.12026-02-16A security flaw has been discovered in Intelbras VIP 3260 Z IA 2.840.00IB005.0.T. Affected by this vulnerability is an unknown functionality of the file /Outsi…
CVE-2020-36963High7.52026-01-28Intelbras Router RF 301K firmware version 1.1.2 contains an authentication bypass vulnerability that allows unauthenticated attackers to download router config…
CVE-2025-13221Medium5.32025-11-15A weakness has been identified in Intelbras UnniTI 24.07.11. The affected element is an unknown function of the file /xml/sistema/usuarios.xml. Executing manip…
CVE-2025-13187Medium5.32025-11-14A security vulnerability has been detected in Intelbras ICIP 2.0.20. Affected is an unknown function of the file /xml/sistema/acessodeusuario.xml. Such manipul…
CVE-2025-55976High8.42025-09-10Intelbras IWR 3000N 1.9.8 exposes the Wi-Fi password in plaintext via the /api/wireless endpoint. Any unauthenticated user on the local network can directly ob…
CVE-2025-26065High7.32025-08-04A cross-site scripting (XSS) vulnerability in Intelbras RX1500 v2.2.9 and RX3000 v1.0.11 allows attackers to execute arbitrary web scripts or HTML via injectin…
CVE-2025-8515Low3.12025-08-04A weakness has been identified in Intelbras InControl 2.21.60.9. This vulnerability affects unknown code of the file /v1/operador/ of the component JSON Endpoi…
CVE-2025-26064High7.32025-07-31A cross-site scripting (XSS) vulnerability in Intelbras RX1500 v2.2.9 and RX3000 v1.0.11 allows attackers to execute arbitrary web scripts or HTML via injectin…
CVE-2025-26063Critical9.82025-07-31An issue in Intelbras RX1500 v2.2.9 and RX3000 v1.0.11 allows unauthenticated attackers to execute arbitrary code via injecting a crafted payload into the ESSI…
CVE-2025-26062Critical9.82025-07-31An access control issue in Intelbras RX1500 v2.2.9 and RX3000 v1.0.11 allows unauthenticated attackers to access the router's settings file and obtain potentia…
CVE-2025-7061Low2.72025-07-04A vulnerability was found in Intelbras InControl up to 2.21.60.9. It has been declared as problematic. This vulnerability affects unknown code of the file /v1/…
CVE-2025-50405Medium6.52025-07-01Intelbras RX1500 Router v2.2.17 and before is vulnerable to Incorrect Access Control in the FirmwareUpload function and GetFirmwareValidation function.
CVE-2025-50404Medium5.32025-07-01Intelbras RX1500 Router v2.2.17 and before is vulnerable to Integer Overflow. The websReadEvent function incorrectly uses the int type when processing the "com…
CVE-2025-6765Medium6.32025-06-27A vulnerability, which was classified as critical, has been found in Intelbras InControl 2.21.60.9. This issue affects some unknown processing of the file /v1/…
CVE-2025-4996Low2.42025-05-20A vulnerability, which was classified as problematic, has been found in Intelbras RF 301K 1.1.5. This issue affects some unknown processing of the component Ad…
CVE-2025-4286Low2.72025-05-05A vulnerability was found in Intelbras InControl up to 2.21.59. It has been classified as problematic. Affected is an unknown function of the component Disposi…
CVE-2025-3157Low2.42025-04-03A vulnerability was found in Intelbras WRN 150 1.0.15_pt_ITB01. It has been rated as problematic. This issue affects some unknown processing of the component W…
CVE-2025-0784Low3.72025-01-28A vulnerability has been found in Intelbras InControl up to 2.21.58 and classified as problematic. This vulnerability affects unknown code of the file /v1/usua…
CVE-2024-12897Medium4.32024-12-23A vulnerability was found in Intelbras VIP S3020 G2, VIP S4020 G2, VIP S4020 G3 and VIP S4320 G2 up to 20241222. It has been classified as critical. This affec…
CVE-2024-12896Medium5.32024-12-22A vulnerability was found in Intelbras VIP S3020 G2, VIP S4020 G2, VIP S4020 G3 and VIP S4320 G2 up to 20241222 and classified as problematic. Affected by this…
CVE-2024-9325High7.82024-09-29A vulnerability classified as critical has been found in Intelbras InControl up to 2.21.56. This affects an unknown part of the file C:\Program Files (x86)\Int…
CVE-2024-9324Medium6.32024-09-29A vulnerability was found in Intelbras InControl up to 2.21.57. It has been rated as critical. Affected by this issue is some unknown functionality of the file…
CVE-2024-6080High7.82024-06-17A vulnerability classified as critical was found in Intelbras InControl 2.21.56. This vulnerability affects unknown code of the component incontrolWebcam Servi…
CVE-2024-3160Medium5.32024-04-02** DISPUTED ** A vulnerability, which was classified as problematic, was found in Intelbras MHDX 1004, MHDX 1008, MHDX 1016, MHDX 5016, HDCVI 1008 and HDCVI 10…
CVE-2024-22773High8.12024-02-06Intelbras Action RF 1200 routers 1.2.2 and earlier and Action RG 1200 routers 2.1.7 and earlier expose the Password in Cookie resulting in Login Bypass.
CVE-2023-6103Low2.42023-11-13A vulnerability has been found in Intelbras RX 1500 1.1.9 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file…
CVE-2023-36144High7.52023-06-30An authentication bypass in Intelbras Switch SG 2404 MR in firmware 1.00.54 allows an unauthenticated attacker to download the backup file of the device, expos…
CVE-2022-40005High8.82022-12-25Intelbras WiFiber 120AC inMesh before 1-1-220826 allows command injection by authenticated users, as demonstrated by the /boaform/formPing6 and /boaform/formTr…
CVE-2022-43308High7.82022-11-18INTELBRAS SG 2404 MR 20180928-rel64938 allows authenticated attackers to arbitrarily create Administrator accounts via crafted user cookies.
CVE-2022-24654Medium5.42022-08-15Authenticated stored cross-site scripting (XSS) vulnerability in "Field Server Address" field in INTELBRAS ATA 200 Firmware 74.19.10.21 allows attackers to inj…
CVE-2021-32403High8.82021-05-17Intelbras Router RF 301K Firmware 1.1.2 is vulnerable to Cross Site Request Forgery (CSRF) due to lack of security mechanisms for token protection and unsafe i…
CVE-2021-32402High8.82021-05-17Intelbras Router RF 301K Firmware 1.1.2 is vulnerable to Cross Site Request Forgery (CSRF) due to lack of validation and insecure configurations in inputs and…
CVE-2021-3017High7.52021-04-14The web interface on Intelbras WIN 300 and WRN 342 devices through 2021-01-04 allows remote attackers to discover credentials by reading the def_wirelesspasswo…
CVE-2020-24285High7.52021-04-12INTELBRAS TELEFONE IP TIP200 version 60.61.75.22 allows an attacker to obtain sensitive information through /cgi-bin/cgiServer.exx.
CVE-2020-12262Medium5.42020-11-27Intelbras TIP200 60.61.75.15, TIP200LITE 60.61.75.15, and TIP300 65.61.75.15 devices allow /cgi-bin/cgiServer.exx?page= XSS.
CVE-2020-13886Medium5.32020-11-26Intelbras TIP 200 60.61.75.15, TIP 200 LITE 60.61.75.15, and TIP 300 65.61.75.22 devices allow cgi-bin/cgiServer.exx?page=../ Directory Traversal.
CVE-2020-8829High8.82020-05-05CSRF on Intelbras CIP 92200 devices allows an attacker to access the panel and perform scraping or other analysis.
CVE-2019-19517High8.82020-05-05Intelbras RF1200 1.1.3 devices allow CSRF to bypass the login.html form, as demonstrated by launching a scrapy process.
CVE-2019-19142High7.52020-01-17Intelbras WRN240 devices do not require authentication to replace the firmware via a POST request to the incoming/Firmware.cfg URI.
CVE-2019-20004High8.82020-01-05An issue was discovered on Intelbras IWR 3000N 1.8.7 devices. When the administrator password is changed from a certain client IP address, administrative autho…
CVE-2019-19996High7.52019-12-26An issue was discovered on Intelbras IWR 3000N 1.8.7 devices. A malformed login request allows remote attackers to cause a denial of service (reboot), as demon…
CVE-2019-19995High8.82019-12-26A CSRF issue was discovered on Intelbras IWR 3000N 1.8.7 devices, leading to complete control of the router, as demonstrated by v1/system/user.
CVE-2019-19007High7.22019-12-05Intelbras IWR 3000N 1.8.7 devices allow disclosure of the administrator login name and password because v1/system/user is mishandled, a related issue to CVE-20…
CVE-2019-19516Medium6.52019-12-02Intelbras WRN 150 1.0.18 devices allow CSRF via GO=system_password.asp to the goform/SysToolChangePwd URI to change a password.
CVE-2019-17222Medium6.12019-11-07An issue was discovered on Intelbras WRN 150 1.0.17 devices. There is stored XSS in the Service Name tab of the WAN configuration screen, leading to a denial o…
CVE-2019-17600Critical9.82019-10-15Intelbras IWR 1000N 1.6.4 devices allow disclosure of the administrator login name and password because v1/system/user is mishandled.
CVE-2019-11416High8.82019-04-22A CSRF issue was discovered on Intelbras IWR 3000N 1.5.0 devices, leading to complete control of the router, as demonstrated by v1/system/user.
CVE-2019-11415High7.52019-04-22An issue was discovered on Intelbras IWR 3000N 1.5.0 devices. A malformed login request allows remote attackers to cause a denial of service (reboot), as demon…
CVE-2019-11414High8.82019-04-22An issue was discovered on Intelbras IWR 3000N 1.5.0 devices. When the administrator password is changed from a certain client IP address, administrative autho…
CVE-2018-17337Medium6.12018-10-10Intelbras NPLUG 1.0.0.14 devices have XSS via a crafted SSID that is received via a network broadcast.
CVE-2018-12456High8.82018-10-10Intelbras NPLUG 1.0.0.14 wireless repeater devices have no CSRF token protection in the web interface, allowing attackers to perform actions such as changing t…
CVE-2018-12455High8.12018-10-10Intelbras NPLUG 1.0.0.14 wireless repeater devices have a critical vulnerability that allows an attacker to authenticate in the web interface just by using "ad…
CVE-2018-10369Critical9.82018-08-15A Cross-site scripting (XSS) vulnerability was discovered on Intelbras Win 240 V1.1.0 devices. An attacker can change the Admin Password without a Login.
CVE-2018-11094Critical9.82018-05-15An issue was discovered on Intelbras NCLOUD 300 1.0 devices. /cgi-bin/ExportSettings.sh, /goform/updateWPS, /goform/RebootSystem, and /goform/vpnBasicSettings…
CVE-2018-9010High7.22018-03-25Intelbras TELEFONE IP TIP200/200 LITE 60.0.75.29 devices allow remote authenticated admins to read arbitrary files via the /cgi-bin/cgiServer.exx page paramete…
CVE-2017-14942Critical9.82017-09-30Intelbras WRN 150 devices allow remote attackers to read the configuration file, and consequently bypass authentication, via a direct request for cgi-bin/Downl…
CVE-2017-14219Medium6.12017-09-07XSS (persistent) on the Intelbras Wireless N 150Mbps router with firmware WRN 240 allows attackers to steal wireless credentials without being connected to the…