CVE-2025-4286

Katalog CVE

CVSS 4.9 · Medium EPSS 0,53%

Kerentanan Credentials Management Errors pada intelbras incontrol web. Skor CVSS 3.1 4.9 (Medium) menurut NVD.

Deskripsi (NVD)

A vulnerability was found in Intelbras InControl up to 2.21.59. It has been classified as problematic. Affected is an unknown function of the component Dispositivos Edição Page. The manipulation of the argument Senha de Comunicação leads to unprotected storage of credentials. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. According to the vendor this issue should be fixed in a later release.

Rincian

Terbit di NVD

5 Mei 2025

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

4.9 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-255: Credentials Management Errors
CWE-256: Plaintext Storage of a Password

EPSS (30 hari)

0,53% peluang dieksploitasi; lebih tinggi dari 43,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://vuldb.com/?id.307392 advisory pihak ketiga · vdb entry
• https://vuldb.com/?submit.483834 advisory pihak ketiga · vdb entry
• https://eldruin.notion.site/Intelbras-InControl-v2-21-57-Storing-password-in-insecure-format-17d27474cccb8003b... exploit
• https://vuldb.com/?ctiid.307392 permissions required · vdb entry