CVE-2021-32403

EPSS 2.5%

Vexday Risk Score

23Low

SSVC decision (CISA)

Attend

PoC available → attend closely

Exploit maturity

Proof of concept

Public proof of concept exists, but not yet automated.

CVSS —EPSS 2.5%KEV nãoPoC públicaNuclei —Metasploit —Patch —

Lifecycle

17 May 2021Published on NVD

09 Jun 2021Public PoC

Weaponization speed

22 daysto first PoC

Recommendation: Plan a near-term fix — a public PoC already exists.

Intelbras Router RF 301K Firmware 1.1.2 is vulnerable to Cross Site Request Forgery (CSRF) due to lack of security mechanisms for token protection and unsafe inputs and modules.

Affected products

n/a · n/a

public PoCs found — 2

cve_referencepacketstormsecurity.com/files/163023/Intelbras-Router-RF-301K-Cross-Site-Request-Forgery.htmlunverified exploitdbwww.exploit-db.com/exploits/49969unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://packetstormsecurity.com/files/163023/Intelbras-Router-RF-301K-Cross-Site-Request-Forgery.html https://www.youtube.com/watch?v=1Ed-2xBFG3M