CVE-2026-124577
Deferred Deferred - Pending Action

Improper Authentication in Intelbras SG 2404 PoE L2+ Web Management Interface

Publication date: 2026-11-09

Last updated on: 2026-11-09

Assigner: VulDB

Description
A weakness has been identified in Intelbras SG 2404 PoE L2+ 1.00.70/1.00.72. The affected element is an unknown function of the file /EXCU_SHELL of the component Web Management Interface. Executing a manipulation can lead to improper authentication. The attack can be launched remotely. The exploit has been made available to the public and could be used for attacks. Upgrading to version 1.00.74 is sufficient to fix this issue. Upgrading the affected component is advised.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-11-09
Last Modified
2026-11-09
Generated
2026-11-09
AI Q&A
2026-11-09
EPSS Evaluated
N/A
NVD
CVE-2026-124577
EUVD
EUVD-2026-119865

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
intelbras sg_2404_poe_l2+ to 1.00.74 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-287 When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is an improper authentication weakness in Intelbras SG 2404 PoE L2+ devices running versions 1.00.70 or 1.00.72. The issue lies in the Web Management Interface's /EXCU_SHELL file, where a manipulation can bypass authentication requirements. The flaw allows remote attackers to gain unauthorized access without valid credentials. A public exploit is available, increasing the risk of real-world attacks. Upgrading to version 1.00.74 fixes the issue.

Detection Guidance

Detecting this vulnerability requires checking the firmware version of the Intelbras SG 2404 PoE L2+ switch. Use the Web Management Interface to verify if the version is below 1.00.74. If you have command-line access, check the firmware version via the device's shell or CLI.

Impact Analysis

This vulnerability could allow attackers to remotely access and control affected Intelbras SG 2404 PoE L2+ devices without authentication. Potential impacts include unauthorized configuration changes, network disruption, data theft, or use of the device as a pivot point for further attacks within the network. Since the exploit is public, the risk of exploitation is elevated.

Compliance Impact

This vulnerability could lead to unauthorized access to network devices, potentially exposing sensitive data or violating access control requirements under GDPR and HIPAA. Improper authentication risks non-compliance with security controls mandated by these regulations, potentially resulting in legal penalties, data breach notifications, and reputational damage.

Mitigation Strategies

Immediately upgrade the firmware to version 1.00.74 or later. Disable remote access to the Web Management Interface if not required. Monitor network traffic for unusual activity and restrict access to the device's administrative interface.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-124577. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart

Security Radar

News mentioning this vulnerability
Loading related security news...