CVE-2018-12456

8.8 highEPSS 0.9%

Intelbras NPLUG 1.0.0.14 wireless repeater devices have no CSRF token protection in the web interface, allowing attackers to perform actions such as changing the wireless SSID, rebooting the device, editing access control lists, or activating remote access.

Severity

CVSS 3.0

8.8 high

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 0.9% chance of exploitation in the next 30 days; higher than 59% of CVEs (scores of 2026-10-31)
CWE: CWE-352
Published: 2018-10-10
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

intelbras:nplug_firmware

References

http://seclists.org/fulldisclosure/2018/Oct/18
http://seclists.org/fulldisclosure/2018/Oct/18

Check your stack JSON