PT-2025-19791 · Intelbras · Intelbras Incontrol

Eldruin · Publicado 2025-05-05 · Atualizado 2025-08-20 · CVE-2025-4286

Positive Technologies (AI Summary)

CVSS v3.1

4.9

Média

Vetor base

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Intelbras InControl versions up to 2.21.59

Description A vulnerability was found in the component Dispositivos Edição Page, where the manipulation of the argument Senha de Comunicação leads to unprotected storage of credentials. This issue can be exploited remotely.

Recommendations For versions up to 2.21.59, wait for a later release that should fix this issue. As a temporary workaround, consider restricting access to the Dispositivos Edição Page component to minimize the risk of exploitation. Avoid using the Senha de Comunicação argument in affected areas until the issue is resolved.

Exploit

Correção

Enumeração de Fraquezas

CWE-256

CWE-255

Identificadores relacionados

CVE-2025-4286

Produtos afetados

Intelbras Incontrol

Referências · 10

• 🔥 https://eldruin.notion.site/Intelbras-InControl-v2-21-57-Storing-password-in-insecure-format-17d27474cccb8003b647ea832186b162?pvs=4 · Exploit
• https://t.me/cvedetector/24507 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2025-4286 · Nota de Segurança
• https://vuldb.com/?submit.483834 · Nota
• https://osv.dev/vulnerability/CVE-2025-4286 · Aviso do Fabricante
• https://t.me/cvetracker/23084 · Publicação no Telegram
• https://t.me/cveNotify/132856 · Publicação no Telegram
• https://twitter.com/CVEnew/status/1919479833027084511 · Publicação no Twitter
• https://vuldb.com/?ctiid.307392 · Nota
• https://vuldb.com/?id.307392 · Nota