Sg 2404 Poe L2
Monthly
Authentication bypass in Intelbras SG 2404 PoE L2+ firmware 1.00.70 and 1.00.72 allows remote, unauthenticated attackers to reach the /EXCU_SHELL endpoint of the web management interface without valid credentials and gain high confidentiality, integrity and availability impact. The CVE description states exploit code has been made available to the public, but no CISA KEV listing confirms active exploitation. The vendor fixed the flaw in firmware 1.00.74; practical risk is highest on switches whose management interface is reachable from untrusted networks or the internet rather than confined to a management VLAN.
Authentication bypass in Intelbras SG 2404 PoE L2+ firmware 1.00.70 and 1.00.72 allows remote, unauthenticated attackers to reach the /EXCU_SHELL endpoint of the web management interface without valid credentials and gain high confidentiality, integrity and availability impact. The CVE description states exploit code has been made available to the public, but no CISA KEV listing confirms active exploitation. The vendor fixed the flaw in firmware 1.00.74; practical risk is highest on switches whose management interface is reachable from untrusted networks or the internet rather than confined to a management VLAN.