Back to Database
Status published
High
CVE-2019-20004
An issue was discovered on Intelbras IWR 3000N 1.8.7 devices....
Vulnerability Description
An issue was discovered on Intelbras IWR 3000N 1.8.7 devices. When the administrator password is changed from a certain client IP address, administrative authorization remains available to any client at that IP address, leading to complete control of the router.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-20004
Credits & Attribution
No credits recorded in the NVD database.
References
More from intelbras
View All →CVE-2022-43308
INTELBRAS SG 2404 MR 20180928-rel64938 allows authenticated attackers to arbitrarily...
Unknown
0
CVE-2022-40005
Intelbras WiFiber 120AC inMesh before 1-1-220826 allows command injection by...
Unknown
0
CVE-2022-24654
Authenticated stored cross-site scripting (XSS) vulnerability in "Field Server Address"...
Medium
5.4
CVE-2021-3017
The web interface on Intelbras WIN 300 and WRN 342...
High
7.5
CVE-2021-32403
Intelbras Router RF 301K Firmware 1.1.2 is vulnerable to Cross...
High
8.8
Affected Vendor
intelbras
View all reports →Affected Software
iwr 3000n firmware
Vulnerable Versions:
1.8.7
Timeline
Official Publish:
January 5th, 2020
Last Modified:
August 5th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.