CVE-2018-12455

EPSS 5.9%

Vexday Risk Score

18Low

SSVC decision (CISA)

Attend

PoC available → attend closely

Exploit maturity

Functional exploit

Automatable exploit available (Nuclei/Metasploit).

CVSS —EPSS 5.9%KEV nãoPoC —Nuclei simMetasploit —Patch —

Lifecycle

10 Oct 2018Published on NVD

Recommendation: Plan a near-term fix — a public PoC already exists.

Intelbras NPLUG 1.0.0.14 wireless repeater devices have a critical vulnerability that allows an attacker to authenticate in the web interface just by using "admin:" as the name of a cookie.

Affected products

n/a · n/a

References

http://seclists.org/fulldisclosure/2018/Oct/18