CVE-2025-8515CWE-200CWE-284

Intelbras InControl JSON Endpoint operador information disclosure

Low · published August 4, 2025

CVSS v4.0
2.3
EPSS
0%
Percentile
19.4
In the wild
Unconfirmed
What it is

A weakness has been identified in Intelbras InControl 2.21.60.9. This vulnerability affects unknown code of the file /v1/operador/ of the component JSON Endpoint. Executing manipulation can lead to information disclosure. It is possible to launch the attack remotely. A high complexity level is associated with this attack. It is stated that the exploitability is difficult. The exploit has been made available to the public and could be exploited. Upgrading the affected component is advised.

The record
Technical detail
CVSS v4.0
2.3 · LOW
Vector
CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P
EPSS
0.00280 · 19.4th percentile
Weaknesses
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor; CWE-284 · Improper Access Control
Published
2025-08-04T10:32Z
EPSS history
Timeline
  • 04 AUG 10:32Z
    Intelbras InControl JSON Endpoint operador information disclosure
    cvelistv5