Back to Database
Status published
High
CVE-2018-12456
Intelbras NPLUG 1.0.0.14 wireless repeater devices have no CSRF token...
Vulnerability Description
Intelbras NPLUG 1.0.0.14 wireless repeater devices have no CSRF token protection in the web interface, allowing attackers to perform actions such as changing the wireless SSID, rebooting the device, editing access control lists, or activating remote access.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-12456
Credits & Attribution
No credits recorded in the NVD database.
More from intelbras
View All →CVE-2022-43308
INTELBRAS SG 2404 MR 20180928-rel64938 allows authenticated attackers to arbitrarily...
Unknown
0
CVE-2022-40005
Intelbras WiFiber 120AC inMesh before 1-1-220826 allows command injection by...
Unknown
0
CVE-2022-24654
Authenticated stored cross-site scripting (XSS) vulnerability in "Field Server Address"...
Medium
5.4
CVE-2021-3017
The web interface on Intelbras WIN 300 and WRN 342...
High
7.5
CVE-2021-32403
Intelbras Router RF 301K Firmware 1.1.2 is vulnerable to Cross...
High
8.8
Affected Vendor
intelbras
View all reports →Affected Software
nplug firmware
Vulnerable Versions:
1.0.0.14
Timeline
Official Publish:
October 10th, 2018
Last Modified:
August 5th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.