CVEvulnerability

CVE-2025-55976

8.4 HIGH Published 2025-09-10 Modified 2026-06-17 Official page ↗

Status: Analyzed
Published: 2025-09-10
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0): 8.4 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses: CWE-200, CWE-319

Description

Intelbras IWR 3000N 1.9.8 exposes the Wi-Fi password in plaintext via the /api/wireless endpoint. Any unauthenticated user on the local network can directly obtain the Wi-Fi network password by querying this endpoint.

Affected configurations

• intelbras iwr 3000n firmware (<= 1.9.8)

Weakness · CWE (2)

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
CWE-319 Cleartext Transmission of Sensitive Information weakness

References

https://medium.com/@windsormoreira/intelbras-iwr-3000n-unauthenticated-wi-fi-password-disclosure-cve-2025-55976-7cdac7770413 Exploit, Third Party Advisory
https://www.intelbras.com/pt-br/produto/roteador-wireless-n-300mbps-iwr-3000n Broken Link

CVE-2025-55976

Description

Affected configurations

Related

Weakness · CWE (2)

References