What’s Vulnerable › Vulnerabilities

CVE-2022-43308

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2022-11-18 · updated 2026-06-17
• Weakness: CWE-269

Description

INTELBRAS SG 2404 MR 20180928-rel64938 allows authenticated attackers to arbitrarily create Administrator accounts via crafted user cookies.

Affected products

• Intelbras Sg 2404 Mr Firmware: all versions
• Intelbras Sg 2404 Poe Firmware: all versions

References

• https://github.com/vitorespf/Advisories/blob/master/Intelbras-switch.txt
• https://www.intelbras.com/pt-br/switch-gerenciavel-24-portas-poe-gigabit-ethernet-sg-2404-poe
• https://github.com/vitorespf/Advisories/blob/master/Intelbras-switch.txt
• https://www.intelbras.com/pt-br/switch-gerenciavel-24-portas-poe-gigabit-ethernet-sg-2404-poe

Get alerted when CVE-2022-43308 or the next vulnerability affects your stack