Vulnerability · Published Jan 28, 2026 · Assigned by VulnCheck
CVE-2020-36963Intelbras Router RF 301K 1.1.2 - Authentication Bypass
High 7.5
In plain English
A high-severity missing authentication in Intelbras Router RF 301K from Intelbras. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 35% of all known vulnerabilities).
Severity (CVSS 3.1)7.5High
Exploit odds (30 days)0.4%top 64.7% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
Intelbras Router RF 301K firmware version 1.1.2 contains an authentication bypass vulnerability that allows unauthenticated attackers to download router configuration files. Attackers can send a specific HTTP GET request to /cgi-bin/DownloadCfg/RouterCfm.cfg to retrieve sensitive router configuration without authentication.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Intelbras | Intelbras Router RF 301K | firmware version 1.1.2 |
Weakness: CWE-306 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
References
- ExploitDB-49126 exploit
- Intelbras Official Homepage product
- VulnCheck Advisory: Intelbras Router RF 301K 1.1.2 - Authentication Bypass third-party-advisory