CVE-2023-36144 Auth bypass in n/a
An unauthenticated attacker can bypass authentication to download device backups, exposing critical configuration information on Intelbras switches.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-36144?
CVE-2023-36144 is a high-severity authentication bypass vulnerability in n/a, published on 30 Jun 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
An authentication bypass in Intelbras Switch SG 2404 MR in firmware 1.00.54 allows an unauthenticated attacker to download the backup file of the device, exposing critical information about the device configuration.
Weakness: CWE-862
Which versions are affected by CVE-2023-36144?
It affects 1 product.
Products include Intelbras Sg 2404 Mr Firmware.
How do I fix CVE-2023-36144?
No fix has been published for CVE-2023-36144 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2023-36144 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2023-36144 exists.
Public exploit code: 1 Nuclei template and 1 proofs of concept on GitHub.
Other vulnerabilities in n/a
Sources
Also known as GHSA-jgg8-69rp-g5j5.