Intelbras Vulnerabilities and Affected Products
Vulnerabilities associated with InControl.
Products
Clear product- InControl8 vulnerabilities
- VIP S3020 G22 vulnerabilities
- VIP S4020 G22 vulnerabilities
- VIP S4020 G32 vulnerabilities
- VIP S4320 G22 vulnerabilities
- HDCVI 10081 vulnerability
- HDCVI 10161 vulnerability
- hdcvi_1008_firmware1 vulnerability
- hdcvi_1016_firmware1 vulnerability
- ICIP1 vulnerability
- Intelbras Router RF 301K1 vulnerability
- iNVU 7016 FT1 vulnerability
- MHDX 10041 vulnerability
- MHDX 10081 vulnerability
- MHDX 10161 vulnerability
- MHDX 50161 vulnerability
- mhdx_1004_firmware1 vulnerability
- mhdx_1008_firmware1 vulnerability
- mhdx_1016_firmware1 vulnerability
- mhdx_5016_firmware1 vulnerability
- RF 301K1 vulnerability
- RX 15001 vulnerability
- sg_2404_mr1 vulnerability
- sg_2404_mr_firmware1 vulnerability
- Telefone IP TIP 2001 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
Intelbras InControl JSON Endpoint operador information disclosureA weakness has been identified in Intelbras InControl 2.21.60.9. This vulnerability affects unknown code of the file /v1/operador/ of the component JSON Endpoint. Executing manipulation can lead to information disclosure. It is possible to launch the attack remotely. A high complexity level is associated with this attack. It is stated that the exploitability is difficult. The exploit has been made available to the public and could be exploited. Upgrading the affected component is advised. | CVSS2.3v4.0 | EPSS0.263% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX | |
CVE-2025-7061MEDIUM | Intelbras InControl operador csv injectionA vulnerability was found in Intelbras InControl up to 2.21.60.9. It has been declared as problematic. This vulnerability affects unknown code of the file /v1/operador/. The manipulation leads to csv injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. | CVSS5.1v4.0 | EPSS0.29% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2025-6765MEDIUM | Intelbras InControl HTTP PUT Request operador permissionA vulnerability, which was classified as critical, has been found in Intelbras InControl 2.21.60.9. This issue affects some unknown processing of the file /v1/operador/ of the component HTTP PUT Request Handler. The manipulation leads to permission issues. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. | CVSS5.3v4.0 | EPSS0.369% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2025-4286MEDIUM | Intelbras InControl Dispositivos Edição Page credentials storageA vulnerability was found in Intelbras InControl up to 2.21.59. It has been classified as problematic. Affected is an unknown function of the component Dispositivos Edição Page. The manipulation of the argument Senha de Comunicação leads to unprotected storage of credentials. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. According to the vendor this issue should be fixed in a later release. | CVSS5.1v4.0 | EPSS0.505% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2025-0784MEDIUM | Intelbras InControl Registered User usuario cleartext transmissionA vulnerability has been found in Intelbras InControl up to 2.21.58 and classified as problematic. This vulnerability affects unknown code of the file /v1/usuario/ of the component Registered User Handler. The manipulation leads to cleartext transmission of sensitive information. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. Upgrading to version 2.21.59 is a… | CVSS6.3v4.0 | EPSS0.472% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-9325HIGH | Intelbras InControl incontrol-service-watchdog.exe unquoted search pathA vulnerability classified as critical has been found in Intelbras InControl up to 2.21.56. This affects an unknown part of the file C:\Program Files (x86)\Intelbras\Incontrol Cliente\incontrol_webcam\incontrol-service-watchdog.exe. The manipulation leads to unquoted search path. It is possible to launch the attack on the local host. Upgrading to version 2.21.58 is able to address this issue. It is recommended to upgrade the affected component. The vendor was informed early on 2024-08-05 about t… | CVSS8.5v4.0 | EPSS0.331% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-9324MEDIUM | Intelbras InControl Relatório de Operadores Page operador code injectionA vulnerability was found in Intelbras InControl up to 2.21.57. It has been rated as critical. Affected by this issue is some unknown functionality of the file /v1/operador/ of the component Relatório de Operadores Page. The manipulation of the argument fields leads to code injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 2.21.58 is able to address this issue. It is recommended to upgrade the affected component. Th… | CVSS5.3v4.0 | EPSS0.611% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-6080HIGH | Intelbras InControl incontrolWebcam Service unquoted search pathA vulnerability classified as critical was found in Intelbras InControl 2.21.56. This vulnerability affects unknown code of the component incontrolWebcam Service. The manipulation leads to unquoted search path. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. Upgrading to version 2.21.58 is able to address this issue. It is recommended to upgrade the affected component. The vendor was contacted early about this disclosure and plans t… | CVSS8.5v4.0 | EPSS0.206% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |