CVE-2023-36144

high · 7.5

A public exploit / detection template exists

Weaponised detection is publicly available, which meaningfully raises real-world risk regardless of CVSS. nuclei-templates →

An authentication bypass in Intelbras Switch SG 2404 MR in firmware 1.00.54 allows an unauthenticated attacker to download the backup file of the device, exposing critical information about the device configuration.

7.5

CVSS

36.5%

EPSS (exploit prob.)

98th

EPSS percentile

2023-06-30

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weaknesses

CWE-862

Affected products

Vendor	Product	Affected versions
intelbras	sg_2404_mr_firmware	1.00.54
intelbras	sg_2404_mr	all versions

Check a specific version with /api/v1/cve/match.

References

https://github.com/leonardobg/CVE-2023-36144
https://github.com/leonardobg/CVE-2023-36144

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2023-36144