A vulnerability was found in Intelbras InControl up to 2.21.59. It has been classified as problematic. Affected is an unknown function of the component Dispositivos Edição Page. The manipulation of the argument Senha de Comunicação leads to unprotected storage of credentials. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. According to the vendor this issue should be fixed in a later release.
References
| Link | Resource |
|---|---|
| https://eldruin.notion.site/Intelbras-InControl-v2-21-57-Storing-password-in-insecure-format-17d27474cccb8003b647ea832186b162?pvs=4 | Exploit |
| https://vuldb.com/?ctiid.307392 | Permissions Required VDB Entry |
| https://vuldb.com/?id.307392 | Third Party Advisory VDB Entry |
| https://vuldb.com/?submit.483834 | Third Party Advisory VDB Entry |
Configurations
History
20 Aug 2025, 02:29
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Intelbras
Intelbras incontrol Web |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 4.9 |
| CPE | cpe:2.3:a:intelbras:incontrol_web:*:*:*:*:*:*:*:* | |
| References | () https://vuldb.com/?ctiid.307392 - Permissions Required, VDB Entry | |
| References | () https://vuldb.com/?id.307392 - Third Party Advisory, VDB Entry | |
| References | () https://eldruin.notion.site/Intelbras-InControl-v2-21-57-Storing-password-in-insecure-format-17d27474cccb8003b647ea832186b162?pvs=4 - Exploit | |
| References | () https://vuldb.com/?submit.483834 - Third Party Advisory, VDB Entry |
05 May 2025, 20:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-05-05 20:15
Updated : 2025-08-20 02:29
NVD link : CVE-2025-4286
Mitre link : CVE-2025-4286
JSON object : View
Products Affected
intelbras
- incontrol_web