Executive Summary

The vulnerability in Intelbras IWR 3000N router firmware version 1.9.8 allows any unauthenticated user on the local network to access the /api/wireless endpoint and retrieve the Wi-Fi password in plaintext. This happens because the API endpoint returns the Wi-Fi password within a JSON response without requiring any login or authentication, exposing sensitive information to unauthorized users. [1]

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can lead to unauthorized access to your Wi-Fi network by anyone connected to the local network. Attackers can use the exposed password to connect to your network, perform lateral movement, network pivoting, Man-in-the-Middle (MitM) attacks, internal network sniffing, and potentially fully compromise your wireless network security. [1]

Useful 0 Not Useful 0

Detection Guidance

You can detect this vulnerability by sending an unauthenticated HTTP GET request to the /vl/interface/wireless endpoint on the Intelbras IWR 3000N router within your local network. For example, using curl: curl http://<router-ip>/vl/interface/wireless. If the response JSON contains fields like "key" or "key1" with the Wi-Fi password in plaintext, the device is vulnerable. [1]

Useful 0 Not Useful 0

Mitigation Strategies

Immediate mitigation steps include restricting access to the router's management interface to trusted devices only, monitoring the network for unknown clients to detect unauthorized access, and replacing the device or updating its firmware once an official fix is released. [1]

Useful 0 Not Useful 0