CVE-2025-4286CWE-256

Intelbras InControl Dispositivos Edição Page credentials storage

Medium · published May 5, 2025

CVSS v4.0
5.1
EPSS
1%
Percentile
43.9
In the wild
Unconfirmed
What it is

A vulnerability was found in Intelbras InControl up to 2.21.59. It has been classified as problematic. Affected is an unknown function of the component Dispositivos Edição Page. The manipulation of the argument Senha de Comunicação leads to unprotected storage of credentials. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. According to the vendor this issue should be fixed in a later release.

The record
Technical detail
CVSS v4.0
5.1 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00529 · 43.9th percentile
Weakness
CWE-256 · Plaintext Storage of a Password
Published
2025-05-05T19:31Z
EPSS history
Timeline
  • 05 MAY 19:31Z
    Intelbras InControl Dispositivos Edição Page credentials storage
    cvelistv5