CVE-2019-11416: CSRF
First published: Sun Apr 21 2019(Updated: )
A CSRF issue was discovered on Intelbras IWR 3000N 1.5.0 devices, leading to complete control of the router, as demonstrated by v1/system/user.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Intelbras Iwr 3000n Firmware | =1.5.0 | |
| Intelbras IWR 3000N |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2019-11416.
What is the severity level of CVE-2019-11416?
The severity level of CVE-2019-11416 is critical with a score of 8.8.
What is the affected software version?
The affected software version is Intelbras IWR 3000N firmware 1.5.0.
How can this vulnerability be exploited?
This vulnerability can be exploited through a CSRF attack on Intelbras IWR 3000N 1.5.0 devices, allowing complete control of the router.
Where can I find more information about CVE-2019-11416?
You can find more information about CVE-2019-11416 at the following references: [Link 1](http://packetstormsecurity.com/files/152682/Intelbras-IWR-3000N-1.5.0-Cross-Site-Request-Forgery.html), [Link 2](https://1.337.zone/2019/04/08/intelbras-iwr-3000n-1-5-0-csrf-lead-to-router-takeover/), [Link 3](https://www.exploit-db.com/exploits/46770/).
- collector/nvd-index
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/severity
- agent/references
- agent/author
- agent/last-modified-date
- agent/tags
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- vendor/intelbras
- canonical/intelbras iwr 3000n firmware
- version/intelbras iwr 3000n firmware/1.5.0
- canonical/intelbras iwr 3000n