CVE Tools
Sign in

CVE-2017-14942

Published: Sep 29, 2017Updated: May 13, 2026 Sources: CVE List NVDCWE-552
9.8CRITICAL
NVD MITRE
EPSS Score
60.9%
Top 0.9%
CISA KEV
Not in KEV
Exploits
1 Known
Remediation
No Fix Available
Self-Check
Nuclei · OpenVAS

Description

Intelbras WRN 150 devices allow remote attackers to read the configuration file, and consequently bypass authentication, via a direct request for cgi-bin/DownloadCfg/RouterCfm.cfg containing an admin:language=pt cookie.

In plain language

AI Act now

CVE-2017-14942 lets outsiders pull a sensitive configuration file from Intelbras WRN 150 routers over the internet, which can reveal admin access and let them bypass authentication—so this is a serious risk for affected devices that are reachable from the internet.

Executive summary

CVE-2017-14942 is an Intelbras WRN 150 vulnerability (CWE-552) where a remote attacker can directly request cgi-bin/DownloadCfg/RouterCfm.cfg to read the router configuration and consequently bypass authentication (weaponized via a publicly available exploit).

If affected, business impact
Full router takeoverAccount and admin access bypassService disruptionPossible device reconfiguration

What to do now

  1. Confirm you run Intelbras WRN 150 firmware (and that the router is exposed to the internet, not just to your internal network).
  2. If the router is internet-reachable, block inbound access to the router’s web/CGI endpoints from the internet (at your firewall/router), especially paths like cgi-bin/DownloadCfg/RouterCfm.cfg.
  3. Check Intelbras support for any firmware update for WRN 150 addressing CVE-2017-14942; apply it as soon as available (no fix details were found in the available sources).
  4. After you patch/mitigate, change router admin credentials and review whether any settings were altered while the device was exposed.
May need vendor / contractor work

CVSS Vector Breakdown

AV:NAC:LPR:NUI:NS:UC:HI:HA:H
Exploitability
AV:NAttack Vector
Network
AC:LAttack Complexity
Low
PR:NPrivileges Required
None
UI:NUser Interaction
None
Scope
S:UScope
Unchanged
Impact
C:HConfidentiality
High
I:HIntegrity
High
A:HAvailability
High
Open in CVSS calculator →

Weaknesses

CWE-552

Affected Products

intelbras
commercial·BR
wrn 150 firmwareEmbeddedFirmware
ICS / OT / IoT / plc-scada-hmi
and 1 more affected products View all →

Exploitability

1 exploit source identified

Exploit details including PoC links, Metasploit modules, and scanner templates are available after registration.

View exploit details
Is your org exposed to CVE-2017-14942?We'll check your whole external perimeter for exposure — free. Check my exposure

Attack Graph

Products CVE Techniques Tactics

Click technique nodes for MITRE ATT&CK details · drag to pan · Ctrl/⌘ + scroll to zoom, or go fullscreen.

MITRE ATT&CK

1 technique
Collection
View detailed technique mapping

References

http://whiteboyz.xyz/authentication-bypass-intelbras-wrn-150.html
whiteboyz.xyz
https://www.exploit-db.com/exploits/42916/
exploit-db.com

Unlock Complete Vulnerability Intelligence

Get the full picture for CVE-2017-14942 and every CVE in our database. Create a free account — no credit card required.

Create Free Account
Plain-language analysis
Impact assessment and exploitation scenario in plain English
Attack graph visualization
Interactive attack path and kill chain mapping
Exploit details & PoC links
ExploitDB, Metasploit, GitHub PoCs with direct links
Nuclei scanner templates
Ready-to-use vulnerability scanner templates
Full remediation guide
Patch instructions, workarounds, and compliance impact
Interactive AI chat
Ask questions about this vulnerability in natural language
Related vulnerabilities
Semantically similar CVEs and attack patterns
REST API & MCP access
Integrate vulnerability data into your workflows