CVE-2018-11094

CVE-2018-11094 — An issue was discovered on Intelbras NCLOUD 300 1.0 devices. /cgi-bin/ExportSett

📅 2018-05-15

🔴 Critical 🔥 No NVD ICS/OT Intel CVSS 9.8 🎯 EPSS 56.29%

📋 الوصف الكامل

An issue was discovered on Intelbras NCLOUD 300 1.0 devices. /cgi-bin/ExportSettings.sh, /goform/updateWPS, /goform/RebootSystem, and /goform/vpnBasicSettings do not require authentication. For example, when an HTTP POST request is made to /cgi-bin/ExportSettings.sh, the username, password, and other details are retrieved.

💻 الأنظمة المتأثرة

Intel Processor

⚠️ نوع التهديد

ICS/OT

🔗 CVE ID

CVE-2018-11094

📡 المصدر

NVD

✅ الحلول والتخفيف

Refer to CVE-2018-11094 NVD advisory

🔗 المصدر الأصلي ← 📘 NVD ← ⚡ CISA KEV ←