PT-2025-31805

CVE-2025-8515

Published

2025-08-04

Updated

2025-10-29

Description by

CVSS 3.1

3.7

Low

MetricsAV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Intelbras InControl version 2.21.60.9

Description A vulnerability exists in Intelbras InControl that allows for information disclosure. The issue is related to the processing of the /v1/operador/ JSON Endpoint. The exploitation of this issue is difficult and requires a high level of complexity, but the exploit has been publicly disclosed.

Recommendations Upgrade the affected component to address the issue.

Exploitability

Fix

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

CWE-284: Improper Access Control

Related identifiers

CVE-2025-8515