Intelbras CFTV IP NVD 9032 R Ftd Multi-Factor Authentication Bypass Vulnerability

A vulnerability in the Intelbras CFTV IP NVD 9032 R Ftd device, running firmware V2.800.00IB00C.0.T, allows an unauthenticated attacker to bypass the multi-factor authentication (MFA) during the password recovery process. This exploitation enables the attacker to change the admin password and gain full access to the administrative panel.

Impact

Exploitation of this vulnerability allows for full administrative access to the NVR panel by bypassing MFA and resetting the admin password.

Reproduction

The vulnerability can be reproduced by intercepting the password recovery request using a proxy. The request can be manipulated to bypass the MFA requirement, allowing the admin password to be reset.