medium6.1Public exploit code
CVE-2017-14219
XSS (persistent) on the Intelbras Wireless N 150Mbps router with firmware WRN 240 allows attackers to steal wireless credentials without being connected to the…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Roteador Wireless Intelbras WRN150 - Cross-Site Scripting2017-09-07 · webapps · hardware
Impact
XSS (persistent) on the Intelbras Wireless N 150Mbps router with firmware WRN 240 allows attackers to steal wireless credentials without being connected to the network, related to userRpm/popupSiteSurveyRpm.htm and userRpm/WlanSecurityRpm.htm. The attack vector is a crafted ESSID, as demonstrated by an "airbase-ng -e" command.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Intelbras | Wrn 240 Firmware | All versions |