CVE-2018-12528

An issue was discovered on Intex N150 devices. The backup/restore option does not check the file extension uploaded for importing a configuration files backup, which can lead to corrupting the router firmware settings or even the uploading of malicious files. In order to exploit the vulnerability, an attacker can upload any malicious file and force reboot the router with it.

• CWE-434

• http://securitywarrior9.blogspot.com/2018/06/malicious-file-upload-intex-router-n.htmlExploit, Third Party Advisory
• https://www.exploit-db.com/exploits/44933/Exploit, Third Party Advisory, VDB Entry
• http://securitywarrior9.blogspot.com/2018/06/malicious-file-upload-intex-router-n.htmlExploit, Third Party Advisory
• https://www.exploit-db.com/exploits/44933/Exploit, Third Party Advisory, VDB Entry

Published

Jul 2, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-12520An issue was discovered in ntopng 3.4 before 3.4.180617. The…8.1
• CVE-2018-12522An issue was discovered in perfSONAR Monitoring and Debuggin…
• CVE-2018-12523An issue was discovered in perfSONAR Monitoring and Debuggin…
• CVE-2018-12524An issue was discovered in perfSONAR Monitoring and Debuggin…
• CVE-2018-12525An issue was discovered in perfSONAR Monitoring and Debuggin…
• CVE-2018-12526Telesquare SDT-CS3B1 and SDT-CW3B1 devices through 1.2.0 hav…
• CVE-2018-12529An issue was discovered on Intex N150 devices. The router fi…
• CVE-2018-1253RSA Authentication Manager Operation Console, versions 8.3 P…6.1
• CVE-2018-12530An issue was discovered in MetInfo 6.0.0. admin/app/batch/cs…
• CVE-2018-12531An issue was discovered in MetInfo 6.0.0. install\index.php …
• CVE-2018-12532JBoss RichFaces 4.5.3 through 4.5.17 allows unauthenticated …
• CVE-2018-12533JBoss RichFaces 3.1.0 through 3.3.4 allows unauthenticated r…