CVE-2021-3017
The web interface on Intelbras WIN 300 and WRN 342 devices through 2021-01-04 allows remote attackers to discover credentials by reading the def_wirelesspassword line in the HTML source code.
Published:Apr 14, 2021
Last Modified:Nov 21, 2024
EPS:Apr 14, 2021
EPSS Score:0.68784
CVSS Score:7.5
Affected Products
Vendor
Product
Action
Vendor
Intelbras
Product
Win 300
Intelbras
Win 300
Vendor
Intelbras
Product
Win 300 Firmware
Intelbras
Win 300 Firmware
Vendor
Intelbras
Product
Wrn 342
Intelbras
Wrn 342
Vendor
Intelbras
Product
Wrn 342 Firmware
Intelbras
Wrn 342 Firmware
Exploits
No exploit reference
Common Weakness Enumeration
No CWE recorded yet
Common Attack Pattern Enumeration and Classification (CAPEC)
No CAPEC recorded yet
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
