Intelbras Vulnerability Vendor: Intelbras Product: RX1500 Version: RX1500 (<=2.2.17) Vulnerability Type: Incorrect Access Control Attack Type: Remote Vulnerability Description The FirmwareUpload function and GetFirmwareValidation function of the HNAP1 router can be accessed without authorization. Hackers can forge a firmware package and upload it, and use the forged fwu.sh to execute any command. Exploit Commands Forge firmware package and upload: Using GetFirmwareValidation trigger: