PT-2025-22286
CVE-2025-4996
·
Published
2025-05-20
·
Updated
2025-05-21
Description by
CVSS 2.0
3.3
LowMetricsAV:N/AC:L/Au:M/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions
Intelbras RF 301K version 1.1.5
Description
A problematic issue has been found in the component Add Static IP, where the manipulation of the
Description argument leads to cross-site scripting. This issue can be exploited remotely.Recommendations
For Intelbras RF 301K version 1.1.5, as a temporary workaround, consider restricting the use of the Add Static IP component until a patch is available. Avoid using the
Description argument in the affected component to minimize the risk of exploitation. Found an issue in the description? Have something to add? Feel free to write us 👾