Login Request a demo
High severity · published Feb 6, 2024
CVE-2024-22773
Intelbras Action RF 1200 routers 1.2.2 and earlier and Action RG 1200 routers 2.1.7 and earlier expose the Password in Cookie resulting in Login Bypass
8.1
CVSS
1%
EPSS
No
On KEV
Description
Intelbras Action RF 1200 routers 1.2.2 and earlier and Action RG 1200 routers 2.1.7 and earlier expose the Password in Cookie resulting in Login Bypass.
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
High
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.0% · higher than 62% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AR
Action RF 1200 Firmware · Intelbras
1.2.2 · source: NVD
Affected product
AR
Action RF 1200 Firmware
Intelbras
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-22773
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-22773
Exploit
https://medium.com/%40wagneralves_87750/poc-cve-2024-22773-febf0d3a5433
www.intelbras.com
https://www.intelbras.com/en/router-wi-fi-5-dual-band-ac-1200-action-rf-1200
www.intelbras.com
https://www.intelbras.com/en/router-wi-fi-5-dual-band-ac-1200-with-giga-port-action-rg-1200
Exploit
https://www.youtube.com/watch?v=-r0TWJq55DU&t=7s
More from Action RF 1200 Firmware
8.8
CVE-2019-19517
Intelbras RF1200 1.1.3 devices allow CSRF to bypass the login.html form, as demonstrated by launching a scrapy process