Cpe:2.3:h:intelbras:sg_2404_poe_l2\+:1.00.70:*:*:*:*:*:*:* - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/cpes/cpe2.3hintelbrassg_2404_poe_l2%5C+1.00.70/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioMon, 09 Nov 2026 09:37:02 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgIntelbras SG 2404 PoE L2+: Improper authentication in Web Management Interface (CVE-2026-124577)https://feed.craftedsignal.io/briefs/2026-11-intelbras-sg-authentication-bypass/Mon, 09 Nov 2026 09:37:02 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-intelbras-sg-authentication-bypass/A remote, unauthenticated authentication bypass vulnerability exists in the Web Management Interface of Intelbras SG 2404 PoE L2+ switches via the /EXCU_SHELL file, for which public exploit code is available.A critical improper authentication vulnerability exists in the Web Management Interface of the Intelbras SG 2404 PoE L2+ switch (firmware versions 1.00.70 and 1.00.72). The vulnerability resides in an unspecified function within the /EXCU_SHELL component and allows unauthenticated remote attackers to bypass authentication. Public exploit code is available, heightening the risk of exploitation.

Impact

Successful exploitation allows for improper authentication, which may grant unauthorized access to the device management interface. Given the CVSS 9.8 score, this access can likely lead to full device compromise.

Recommendation

  • Upgrade Intelbras SG 2404 PoE L2+ firmware to version 1.00.74 or later immediately.
  • Restrict access to the device web management interface to trusted internal networks only.
  • Audit network logs for unauthorized access attempts targeting the /EXCU_SHELL path.
]]>criticaladvisory