ByteOS Network

NVD Vulnerability Details :

CVE-2025-8515

Analyzed

Source-cna@vuldb.com

Published At-04 Aug, 2025 | 11:15

Updated At-21 Aug, 2025 | 00:14

A vulnerability was found in Intelbras InControl 2.21.60.9 and classified as problematic. This issue affects some unknown processing of the file /v1/operador/ of the component JSON Endpoint. The manipulation leads to information disclosure. The attack may be initiated remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Secondary	4.0	2.3	LOW	CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Secondary	3.1	3.1	LOW	CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
Primary	3.1	3.7	LOW	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
Secondary	2.0	2.1	LOW	AV:N/AC:H/Au:S/C:P/I:N/A:N

CPE Matches

intelbras>>incontrol_web>>2.21.60.9

cpe:2.3:a:intelbras:incontrol_web:2.21.60.9:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-200	Primary	cna@vuldb.com
CWE-284	Primary	cna@vuldb.com
NVD-CWE-noinfo	Primary	nvd@nist.gov

References

Hyperlink	Source	Resource
https://vuldb.com/?ctiid.318641	cna@vuldb.com	Permissions Required VDB Entry
https://vuldb.com/?id.318641	cna@vuldb.com	Third Party Advisory VDB Entry
https://vuldb.com/?submit.579544	cna@vuldb.com	Third Party Advisory VDB Entry

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History