VYPR

Inteno Router Firmware

by Intenogroup

CVEs (1)

  • CVE-2017-11361HigJul 17, 2017
    risk 0.57cvss 8.8epss 0.01

    Inteno routers have a JUCI ACL misconfiguration that allows the "user" account to read files, write to files, and add root SSH keys via JSON commands to ubus. (Exploitation is sometimes easy because the "user" password might be "user" or might match the Wi-Fi key.)