Skip to content
OpenAdvisories

Vendor

Intelbras

23 known vulnerabilities.

Intelbras at a glance

Last 12 months
9
Critical · all time
1
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 1 2 December 2025: 0 vulnerabilities Dec 2025 January 2026: 1 vulnerability February 2026: 2 vulnerabilities March 2026: 1 vulnerability Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 1 vulnerability Jun July 2026: 0 vulnerabilities August 2026: 0 vulnerabilities September 2026: 1 vulnerability Sep October 2026: 0 vulnerabilities November 2026: 1 vulnerability, 1 critical
Show as table
MonthVulnerabilitiesCritical
Nov 202611
Oct 202600
Sep 202610
Aug 202600
Jul 202600
Jun 202610
May 202600
Apr 202600
Mar 202610
Feb 202620
Jan 202610
Dec 202500
Nov 202520
Oct 202500
Sep 202500
Aug 202510
Jul 202510
Jun 202510
May 202520
Apr 202510
Mar 202500
Feb 202500
Jan 202510
Dec 202420

23 results · Feed

  • Critical 9.8

    Intelbras SG 2404 PoE L2+ Web Management EXCU_SHELL improper authentication

    A weakness has been identified in Intelbras SG 2404 PoE L2+ 1.00.70/1.00.72. The affected element is an unknown function of the file /EXCU_SHELL of the component Web Management Interface. Executing a manipulation can lead to improper authentication. The attac…

  • Low 3.1

    Intelbras TIP 125i Básico sensitive information in source

    A vulnerability was identified in Intelbras TIP 125i 4.3.35/4.3.41. The affected element is an unknown function of the component Básico Page. Such manipulation leads to inclusion of sensitive information in source code. The attack can be launched remotely. A …

  • Low 2.7

    Intelbras iNVU 7016 FT Web syslog path traversal

    A flaw has been found in Intelbras iNVU 7016 FT 3.004.00IB000.0.T Build 2025-09-26. This impacts an unknown function of the file /RPC2_Loadfile/syslog/ of the component Web Interface. Executing a manipulation can lead to path traversal. The attack can be laun…

  • High 7.5

    IntelBras Telefone IP TIP200/200 LITE Arbitrary File Read via dumpConfigFile

    IntelBras Telefone IP TIP200 and 200 LITE contain an unauthenticated arbitrary file read vulnerability in the dumpConfigFile function accessible via the cgiServer.exx endpoint. Attackers can send GET requests to /cgi-bin/cgiServer.exx with the command paramet…

  • Medium 6.3

    Intelbras TIP 635G Ping os command injection

    A vulnerability was found in Intelbras TIP 635G 1.12.3.5. This vulnerability affects unknown code of the component Ping Handler. The manipulation results in os command injection. The attack can be executed remotely. The exploit has been made public and could …

  • High 8.1

    Intelbras VIP 3260 Z IA OutsideCmd password recovery

    A security flaw has been discovered in Intelbras VIP 3260 Z IA 2.840.00IB005.0.T. Affected by this vulnerability is an unknown functionality of the file /OutsideCmd. The manipulation results in weak password recovery. It is possible to launch the attack remot…

  • High 7.5

    Intelbras Router RF 301K 1.1.2 - Authentication Bypass

    Intelbras Router RF 301K firmware version 1.1.2 contains an authentication bypass vulnerability that allows unauthenticated attackers to download router configuration files. Attackers can send a specific HTTP GET request to /cgi-bin/DownloadCfg/RouterCfm.cfg …

  • Medium 5.3

    Intelbras UnniTI usuarios.xml credentials storage

    A weakness has been identified in Intelbras UnniTI 24.07.11. The affected element is an unknown function of the file /xml/sistema/usuarios.xml. Executing manipulation of the argument Usuario/Senha can lead to unprotected storage of credentials. The attack can…

  • Medium 5.3

    Intelbras ICIP acessodeusuario.xml credentials storage

    A security vulnerability has been detected in Intelbras ICIP 2.0.20. Affected is an unknown function of the file /xml/sistema/acessodeusuario.xml. Such manipulation of the argument NomeUsuario/SenhaAcess leads to unprotected storage of credentials. The attack…

  • Low 3.1

    Intelbras InControl JSON Endpoint operador information disclosure

    A weakness has been identified in Intelbras InControl 2.21.60.9. This vulnerability affects unknown code of the file /v1/operador/ of the component JSON Endpoint. Executing manipulation can lead to information disclosure. It is possible to launch the attack r…

  • Low 2.7

    Intelbras InControl operador csv injection

    A vulnerability was found in Intelbras InControl up to 2.21.60.9. It has been declared as problematic. This vulnerability affects unknown code of the file /v1/operador/. The manipulation leads to csv injection. The attack can be initiated remotely. The exploi…

  • Medium 6.3

    Intelbras InControl HTTP PUT Request operador permission

    A vulnerability, which was classified as critical, has been found in Intelbras InControl 2.21.60.9. This issue affects some unknown processing of the file /v1/operador/ of the component HTTP PUT Request Handler. The manipulation leads to permission issues. Th…

  • Low 2.4

    Intelbras RF 301K Add Static IP cross site scripting

    A vulnerability, which was classified as problematic, has been found in Intelbras RF 301K 1.1.5. This issue affects some unknown processing of the component Add Static IP. The manipulation of the argument Description leads to cross site scripting. The attack …

  • Low 2.7

    Intelbras InControl Dispositivos Edição Page credentials storage

    A vulnerability was found in Intelbras InControl up to 2.21.59. It has been classified as problematic. Affected is an unknown function of the component Dispositivos Edição Page. The manipulation of the argument Senha de Comunicação leads to unprotected storag…

  • Low 2.4

    Intelbras WRN 150 Wireless Menu cross site scripting

    A vulnerability was found in Intelbras WRN 150 1.0.15_pt_ITB01. It has been rated as problematic. This issue affects some unknown processing of the component Wireless Menu. The manipulation of the argument SSID leads to cross site scripting. The attack may be…

  • Low 3.7

    Intelbras InControl Registered User usuario cleartext transmission

    A vulnerability has been found in Intelbras InControl up to 2.21.58 and classified as problematic. This vulnerability affects unknown code of the file /v1/usuario/ of the component Registered User Handler. The manipulation leads to cleartext transmission of s…

  • Medium 4.3

    Intelbras VIP S4320 G2 Web Interface Sha1Account1 path traversal

    A vulnerability was found in Intelbras VIP S3020 G2, VIP S4020 G2, VIP S4020 G3 and VIP S4320 G2 up to 20241222. It has been classified as critical. This affects an unknown part of the file ../mtd/Config/Sha1Account1 of the component Web Interface. The manipu…

  • Medium 5.3

    Intelbras VIP S4320 G2 Web Interface webCapsConfig information disclosure

    A vulnerability was found in Intelbras VIP S3020 G2, VIP S4020 G2, VIP S4020 G3 and VIP S4320 G2 up to 20241222 and classified as problematic. Affected by this issue is some unknown functionality of the file /web_caps/webCapsConfig of the component Web Interf…

  • High 7.8

    Intelbras InControl incontrol-service-watchdog.exe unquoted search path

    A vulnerability classified as critical has been found in Intelbras InControl up to 2.21.56. This affects an unknown part of the file C:\Program Files (x86)\Intelbras\Incontrol Cliente\incontrol_webcam\incontrol-service-watchdog.exe. The manipulation leads to …

  • Medium 6.3

    Intelbras InControl Relatório de Operadores Page operador code injection

    A vulnerability was found in Intelbras InControl up to 2.21.57. It has been rated as critical. Affected by this issue is some unknown functionality of the file /v1/operador/ of the component Relatório de Operadores Page. The manipulation of the argument field…

  • High 7.8

    Intelbras InControl incontrolWebcam Service unquoted search path

    A vulnerability classified as critical was found in Intelbras InControl 2.21.56. This vulnerability affects unknown code of the component incontrolWebcam Service. The manipulation leads to unquoted search path. Local access is required to approach this attack…

  • Medium 5.3

    Intelbras HDCVI 1016 HTTP GET Request cap.js information disclosure

    ** DISPUTED ** A vulnerability, which was classified as problematic, was found in Intelbras MHDX 1004, MHDX 1008, MHDX 1016, MHDX 5016, HDCVI 1008 and HDCVI 1016 up to 20240401. This affects an unknown part of the file /cap.js of the component HTTP GET Reques…

  • Low 2.4

    Intelbras RX 1500 SSID WiFi.html cross site scripting

    A vulnerability has been found in Intelbras RX 1500 1.1.9 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /WiFi.html of the component SSID Handler. The manipulation leads to cross site scripting. The attac…