SG 2404 PoE L2+ (1.00.70, 1.00.72)

A remote, unauthenticated authentication bypass vulnerability exists in the Web Management Interface of Intelbras SG 2404 PoE L2+ switches via the /EXCU_SHELL file, for which public exploit code is available.