cve/2019/CVE-2019-19142.md

CVE-2019-19142

Description

Intelbras WRN240 devices do not require authentication to replace the firmware via a POST request to the incoming/Firmware.cfg URI.

POC

Reference

• http://packetstormsecurity.com/files/156589/Intelbras-Wireless-N-150Mbps-WRN240-Authentication-Bypass.html
• http://packetstormsecurity.com/files/156589/Intelbras-Wireless-N-150Mbps-WRN240-Authentication-Bypass.html
• https://fireshellsecurity.team/hack-n-routers/
• https://fireshellsecurity.team/hack-n-routers/

Github

• https://github.com/ARPSyndicate/cvemon