CVE-2017-14219

XSS (persistent) on the Intelbras Wireless N 150Mbps router with firmware WRN 240 allows attackers to steal wireless credentials without being connected to the network, related to userRpm/popupSiteSurveyRpm.htm and userRpm/WlanSecurityRpm.htm. The attack vector is a crafted ESSID, as demonstrated by an "airbase-ng -e" command.

Score

CVSS 3.0 6.1 Medium

Status

Modified - cve@mitre.org

Published

2017-09-07

Last modified

2024-08-05

Weaknesses

CWE-79

Affected products

• Wrn 240 Firmware (Intelbras)

References

• http://whiteboyz.xyz/xss-roteador-intelbras-wrn-240.html
• https://www.exploit-db.com/exploits/42633/