Intelbras SG 2404 Mr Firmware vulnerabilities

2 CVEs affecting Intelbras SG 2404 Mr Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-36144, published 2023-06-30.

More from Intelbras.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2023-36144, published 2023-06-30. High severity, CVSS 7.5. EPSS: 36.5% chance of exploitation in the next 30 days. An authentication bypass in Intelbras Switch SG 2404 MR in firmware 1.00.54 allows an unauthenticated attacker to download the backup file of the device, exposing critical information about the…
• CVE-2022-43308, published 2022-11-18. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. INTELBRAS SG 2404 MR 20180928-rel64938 allows authenticated attackers to arbitrarily create Administrator accounts via crafted user cookies.