CVE-2022-43308

HIGH 7.8EPSS 0.3%

INTELBRAS SG 2404 MR 20180928-rel64938 allows authenticated attackers to arbitrarily create Administrator accounts via crafted user cookies.

CVSS v3.1: 7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v3.1: 7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS: 0.28% chance of exploitation in the next 30 days, 20th percentile
Published: 2022-11-18
Updated: 2025-04-30

Proof-of-concept exploits (1)

vitorespf/Advisories/blob/master/Intelbras-switch.txt

References

Related