CVE-2024-22773

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-22773

8.1 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 2.2 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

I

ntelbras Action RF 1200 routers 1.2.2 and earlier and Action RG 1200 routers 2.1.7 and earlier expose the Password in Cookie resulting in Login Bypass.

References
Link Resource
https://medium.com/%40wagneralves_87750/poc-cve-2024-22773-febf0d3a5433 Exploit
https://www.intelbras.com/en/router-wi-fi-5-dual-band-ac-1200-action-rf-1200
https://www.intelbras.com/en/router-wi-fi-5-dual-band-ac-1200-with-giga-port-action-rg-1200
https://www.youtube.com/watch?v=-r0TWJq55DU&t=7s Exploit
https://medium.com/%40wagneralves_87750/poc-cve-2024-22773-febf0d3a5433 Exploit
https://www.intelbras.com/en/router-wi-fi-5-dual-band-ac-1200-action-rf-1200
https://www.intelbras.com/en/router-wi-fi-5-dual-band-ac-1200-with-giga-port-action-rg-1200
https://www.youtube.com/watch?v=-r0TWJq55DU&t=7s Exploit
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:intelbras:action_rf_1200_firmware:1.2.2:*:*:*:*:*:*:*
cpe:2.3:h:intelbras:action_rf_1200:-:*:*:*:*:*:*:*
History

21 Nov 2024, 08:56

Type Values Removed Values Added
References () https://medium.com/%40wagneralves_87750/poc-cve-2024-22773-febf0d3a5433 - Exploit () https://medium.com/%40wagneralves_87750/poc-cve-2024-22773-febf0d3a5433 - Exploit
References () https://www.intelbras.com/en/router-wi-fi-5-dual-band-ac-1200-action-rf-1200 - () https://www.intelbras.com/en/router-wi-fi-5-dual-band-ac-1200-action-rf-1200 -
References () https://www.intelbras.com/en/router-wi-fi-5-dual-band-ac-1200-with-giga-port-action-rg-1200 - () https://www.intelbras.com/en/router-wi-fi-5-dual-band-ac-1200-with-giga-port-action-rg-1200 -
References () https://www.youtube.com/watch?v=-r0TWJq55DU&t=7s - Exploit () https://www.youtube.com/watch?v=-r0TWJq55DU&t=7s - Exploit

29 Apr 2024, 20:15

Type Values Removed Values Added
References
  • () https://www.intelbras.com/en/router-wi-fi-5-dual-band-ac-1200-action-rf-1200 -
  • () https://www.intelbras.com/en/router-wi-fi-5-dual-band-ac-1200-with-giga-port-action-rg-1200 -
Summary (en) Intelbras Roteador ACtion RF 1200 1.2.2 esposes the Password in Cookie resulting in Login Bypass. (en) Intelbras Action RF 1200 routers 1.2.2 and earlier and Action RG 1200 routers 2.1.7 and earlier expose the Password in Cookie resulting in Login Bypass.
Information

Published : 2024-02-06 01:15

Updated : 2025-06-05 17:15

NVD link : CVE-2024-22773

Mitre link : CVE-2024-22773

CVE.ORG link : CVE-2024-22773

JSON object : View

Products Affected

intelbras

CWE
CWE-922

Insecure Storage of Sensitive Information