Intelbras WRN 150 devices allow remote attackers to read the configuration file and consequently bypass authentication via a direct request for cgi-bin/DownloadCfg/RouterCfm.cfg containing an admin:language=pt cookie.