CVE-2023-36144

An authentication bypass in Intelbras Switch SG 2404 MR in firmware 1.00.54 allows an unauthenticated attacker to download the backup file of the device, exposing critical information about the device configuration.

CVSS v3.1

7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

36.51% chance of exploitation in the next 30 days, 98th percentile

Nuclei

high · CWE-862

Published

2023-06-30

Updated

2026-07-09

Proof-of-concept exploits (1)

• leonardobg/CVE-2023-361441★ · 2023-06-22

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-36144.yaml

References

• CVE Record
• NVD entry

Related

• CVE-2022-24654
• CVE-2023-36143
• CVE-2023-36146
• CVE-2023-36123
• CVE-2023-36158
• CVE-2023-36121