CVE-2025-0784
CVSS 3.1 Score 3.7 of 10 (low)
Details
Published Jan 28, 2025
CWE ID 319
CWE ID 310
Summary
CVE-2025-0784 is a recently disclosed vulnerability affecting Intelbras InControl up to version 2.21.58. This issue lies within the Registered User Handler component and impacts an unknown part of the /v1/usuario/ file. The exploitation results in cleartext transmission of sensitive data, allowing the attack to be initiated remotely. The complexity and difficulty of an attack are relatively high, but the exploit has become public. To mitigate the risk, it is strongly advised to upgrade to version 2.21.59.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share
Affected Products
- inControl