CVE-2025-8515

Katalog CVE

CVSS 3.7 · Low EPSS 0,28%

Kerentanan Exposure of Sensitive Information to an Unauthorized Actor pada intelbras incontrol web. Skor CVSS 3.1 3.7 (Low) menurut NVD.

Deskripsi (NVD)

A weakness has been identified in Intelbras InControl 2.21.60.9. This vulnerability affects unknown code of the file /v1/operador/ of the component JSON Endpoint. Executing manipulation can lead to information disclosure. It is possible to launch the attack remotely. A high complexity level is associated with this attack. It is stated that the exploitability is difficult. The exploit has been made available to the public and could be exploited. Upgrading the affected component is advised.

Rincian

Terbit di NVD

4 Agustus 2025

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

3.7 (Low), sumber NVD
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
CWE-284: Improper Access Control

EPSS (30 hari)

0,28% peluang dieksploitasi; lebih tinggi dari 18,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://vuldb.com/?id.318641 advisory pihak ketiga · vdb entry
• https://vuldb.com/?submit.579544 advisory pihak ketiga · vdb entry
• https://backend.intelbras.com/sites/default/files/2025-08/Aviso%20de%20Seguran%C3%A7a%20-%20Incontrol%202.21.6...
• https://vuldb.com/?ctiid.318641 permissions required · vdb entry