CVE-2019-20004

An issue was discovered on Intelbras IWR 3000N 1.8.7 devices. When the administrator password is changed from a certain client IP address, administrative authorization remains available to any client at that IP address, leading to complete control of the router.

CVSS v3 8.8 HIGH
CVSS v2.0 4.3 MEDIUM

8.8^/10

CVSS v3 : HIGH

Vector :

Exploitability : 2.8 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

4.3^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:M/Au:N/C:P/I:N/A:N

Exploitability : 8.6 / Impact : 2.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
http://en.intelbras.com.br/downloads	Vendor Advisory
https://medium.com/%40rsantos_14778/remote-control-cve-2019-20004-21f77e976715

Configurations

Configuration 1 (hide)

AND

cpe:2.3:o:intelbras:iwr_3000n_firmware:1.8.7:*:*:*:*:*:*:*

cpe:2.3:h:intelbras:iwr_3000n:-:*:*:*:*:*:*:*

History

No history.

Information

Published : 2020-01-05 23:15

Updated : 2024-02-04 20:39

NVD link : CVE-2019-20004

Mitre link : CVE-2019-20004

CVE.ORG link : CVE-2019-20004

JSON object : View

Products Affected

intelbras

iwr_3000n
iwr_3000n_firmware

CWE

CWE-640

Weak Password Recovery Mechanism for Forgotten Password

{"id": "CVE-2019-20004", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.8}]}, "published": "2020-01-05T23:15:10.967", "references": [{"url": "http://en.intelbras.com.br/downloads", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://medium.com/%40rsantos_14778/remote-control-cve-2019-20004-21f77e976715", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-640"}]}], "descriptions": [{"lang": "en", "value": "An issue was discovered on Intelbras IWR 3000N 1.8.7 devices. When the administrator password is changed from a certain client IP address, administrative authorization remains available to any client at that IP address, leading to complete control of the router."}, {"lang": "es", "value": "Se descubri\u00f3 un problema en los dispositivos Intelbras IWR 3000N versi\u00f3n 1.8.7. Cuando la contrase\u00f1a de administrador es cambiada desde una determinada direcci\u00f3n IP de cliente, la autorizaci\u00f3n administrativa se conserva disponible para cualquier cliente en esa direcci\u00f3n IP, conllevando a un control completo del router."}], "lastModified": "2023-11-07T03:08:38.460", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:intelbras:iwr_3000n_firmware:1.8.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "606FB916-E0DB-464E-8A95-6554BBDDD578"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:intelbras:iwr_3000n:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "EF248849-8504-49EF-A539-58B3C1A3E39C"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "cve@mitre.org"}