PT-2025-4044 · Intelbras · Intelbras Incontrol

Eldruin · Published 2025-01-28 · Updated 2025-08-20 · CVE-2025-0784

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Intelbras InControl versions up to 2.21.58

Description A vulnerability has been found in Intelbras InControl, affecting unknown code of the file /v1/usuario/ of the component Registered User Handler. The manipulation leads to cleartext transmission of sensitive information. The attack can be initiated remotely. The complexity of an attack is rather high, and the exploitation appears to be difficult.

Recommendations For Intelbras InControl versions up to 2.21.58, upgrade to version 2.21.59 to address this issue. As a temporary workaround, consider restricting access to the /v1/usuario/ endpoint of the Registered User Handler component until the upgrade is applied.

Exploit

Fix

Cleartext Transmission of Sensitive Information

Weakness Enumeration

CWE-310

CWE-319

Related Identifiers

CVE-2025-0784

Affected Products

Intelbras Incontrol

References · 10

• 🔥 https://eldruin.notion.site/Intelbras-InControl-v2-21-57-Password-exposed-in-clear-text-17d27474cccb806fba1efda195c78258?pvs=4 · Exploit
• https://osv.dev/vulnerability/CVE-2025-0784 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-0784 · Security Note
• https://twitter.com/VulmonFeeds/status/1884341381646242185 · Twitter Post
• https://vuldb.com/?ctiid.293908 · Note
• https://twitter.com/CVEnew/status/1884334356199579780 · Twitter Post
• https://t.me/cvedetector/16630 · Telegram Post
• https://vuldb.com/?submit.483835 · Note
• https://vuldb.com/?id.293908 · Note
• https://t.me/cveNotify/132929 · Telegram Post