CVE-2025-4286

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-4286
A vulnerability was found in Intelbras InControl up to 2.21.59. It has been classified as problematic. Affected is an unknown function of the component Dispositivos Edição Page. The manipulation of the argument Senha de Comunicação leads to unprotected storage of credentials. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. According to the vendor this issue should be fixed in a later release.

2.7 /10

CVSS v3 : LOW

V3 Legend

Vector :

Exploitability : 1.2 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

3.3 /10

CVSS v2.0 : LOW

V2 Legend

Vector : AV:N/AC:L/Au:M/C:P/I:N/A:N

Exploitability : 6.4 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication MULTIPLE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References
Link Resource
https://eldruin.notion.site/Intelbras-InControl-v2-21-57-Storing-password-in-insecure-format-17d27474cccb8003b647ea832186b162?pvs=4 Exploit
https://vuldb.com/?ctiid.307392 Permissions Required VDB Entry
https://vuldb.com/?id.307392 Third Party Advisory VDB Entry
https://vuldb.com/?submit.483834 Third Party Advisory VDB Entry
Configurations

Configuration 1 (hide)

cpe:2.3:a:intelbras:incontrol_web:*:*:*:*:*:*:*:*
History

20 Aug 2025, 02:29

Type Values Removed Values Added
CPE cpe:2.3:a:intelbras:incontrol_web:*:*:*:*:*:*:*:*
References () https://eldruin.notion.site/Intelbras-InControl-v2-21-57-Storing-password-in-insecure-format-17d27474cccb8003b647ea832186b162?pvs=4 - () https://eldruin.notion.site/Intelbras-InControl-v2-21-57-Storing-password-in-insecure-format-17d27474cccb8003b647ea832186b162?pvs=4 - Exploit
References () https://vuldb.com/?ctiid.307392 - () https://vuldb.com/?ctiid.307392 - Permissions Required, VDB Entry
References () https://vuldb.com/?id.307392 - () https://vuldb.com/?id.307392 - Third Party Advisory, VDB Entry
References () https://vuldb.com/?submit.483834 - () https://vuldb.com/?submit.483834 - Third Party Advisory, VDB Entry
First Time Intelbras incontrol Web
Intelbras
Summary
  • (es) Se encontró una vulnerabilidad en Intelbras InControl hasta la versión 2.21.59. Se ha clasificado como problemática. Se ve afectada una función desconocida del componente Dispositivos Edição Page. La manipulación del argumento "Senha de Comunicação" provoca el almacenamiento desprotegido de credenciales. Es posible lanzar el ataque de forma remota. Se ha hecho público el exploit y puede que sea utilizado. Según el proveedor, este problema debería solucionarse en una versión posterior.

05 May 2025, 20:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-05-05 20:15

Updated : 2025-08-20 02:29

NVD link : CVE-2025-4286

Mitre link : CVE-2025-4286

CVE.ORG link : CVE-2025-4286

JSON object : View

Products Affected

intelbras

  • incontrol_web
CWE
CWE-255

Credentials Management Errors

CWE-256

Plaintext Storage of a Password