cve/2017/CVE-2017-14219.md

### [CVE-2017-14219](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14219)
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)

### Description

XSS (persistent) on the Intelbras Wireless N 150Mbps router with firmware WRN 240 allows attackers to steal wireless credentials without being connected to the network, related to userRpm/popupSiteSurveyRpm.htm and userRpm/WlanSecurityRpm.htm. The attack vector is a crafted ESSID, as demonstrated by an "airbase-ng -e" command.

### POC

#### Reference
- https://www.exploit-db.com/exploits/42633/

#### Github
No PoCs found on GitHub currently.