CVE-2019-19516: Intelbras WRN 150 1.0.18 devices allow CSRF via GO=system_password.asp to the goform/SysToolChangePwd URI t...

Security readout for executives and security teams

This CVE describes a weakness in an Intelbras router where a logged-in administrator’s browser could be tricked into changing the router password. The public record names Intelbras WRN 150 firmware 1.0.18. Source evidence is limited and does not provide a vendor patch, CVSS score, or confirmed exploitation. Exposure is most relevant where affected Intelbras router administration interfaces are reachable by users’ browsers, especially on internal networks. Internet-exposed admin panels would increase risk, but the supplied sources do not confirm typical exposure conditions or affected deployment prevalence. Prioritize review if these Intelbras routers support business connectivity or are remotely managed. The likely business risk is loss of administrative control over network edge equipment, but urgency is tempered by missing CVSS data, unclear affected scope, and no confirmed active exploitation. Mitigation focus: Check Intelbras guidance for firmware updates or product-specific remediation.; Restrict router administration interfaces to trusted management networks only.; Disable remote administration if it is not required..

Prepared

Jun 6, 2026, 03:53 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.