CVE-2025-26062
Published: 31 July 2025
Summary
CVE-2025-26062 is a critical-severity Improper Access Control (CWE-284) vulnerability in Intelbras Rx 1500 Firmware. Its CVSS base score is 9.8 (Critical).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploit Public-Facing Application (T1190); ranked in the top 19.0% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
The strongest mitigations our analysis identified are NIST 800-53 AC-3 (Access Enforcement) and IA-8 (Identification and Authentication (Non-organizational Users)).
Deeper analysis
CVE-2025-26062 is an improper access control vulnerability, tracked under CWE-284, that affects Intelbras RX1500 version 2.2.9 and RX3000 version 1.0.11 routers. It enables unauthenticated remote attackers to retrieve the device settings file, exposing potentially sensitive configuration data without requiring any credentials or user interaction.
An attacker with network access can directly request the settings file over the network, achieving full confidentiality, integrity, and availability impact as reflected in the CVSS 9.8 score. This allows extraction of router configuration details that could facilitate further compromise of the device or connected networks.
The EPSS score remains flat at 0.0142 with no material increase since disclosure. Public references consist of Intelbras changelog pages for the affected RX series and Full Disclosure mailing list posts from July 2025, though no specific mitigation guidance is detailed in the available information.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2025-23310
Vulnerability details
An access control issue in Intelbras RX1500 v2.2.9 and RX3000 v1.0.11 allows unauthenticated attackers to access the router's settings file and obtain potentially sensitive information from the current settings.
- CWE(s)
Related Threats
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Direct unauthenticated access to router config/settings file on public-facing network device matches exploitation of public-facing apps for data access.
CVEs Like This One
Affected Assets
Mitigating Controls
Mitigating Controls (NIST 800-53 r5) AI
Enforces approved authorizations for access to system resources like the router's settings file, directly preventing unauthenticated access.
Requires unique identification and authentication for non-organizational users, blocking unauthenticated network attackers from accessing sensitive router configurations.
Provides a risk-based process to identify, prioritize, and remediate flaws like this access control vulnerability through timely firmware updates.