high8.4
CVE-2025-55976
Intelbras IWR 3000N 1.9.8 exposes the Wi-Fi password in plaintext via the /api/wireless endpoint.
Impact
Intelbras IWR 3000N 1.9.8 exposes the Wi-Fi password in plaintext via the /api/wireless endpoint. Any unauthenticated user on the local network can directly obtain the Wi-Fi network password by querying this endpoint.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Intelbras | Iwr 3000n Firmware | through 1.9.8 |