CVE-2025-7061: Intelbras InControl operador csv injection
A vulnerability was found in Intelbras InControl up to 2.21.60.9. It has been declared as problematic. This vulnerability affects unknown code of the file /v1/operador/. The manipulation leads to csv injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-7061?
CVE-2025-7061 has been classified as a problematic vulnerability due to its potential for remote exploitation.
How does CVE-2025-7061 exploit occur?
The CVE-2025-7061 vulnerability allows for CSV injection through manipulation of the /v1/operador/ file.
Which versions of Intelbras InControl are affected by CVE-2025-7061?
CVE-2025-7061 affects Intelbras InControl versions up to and including 2.21.60.9.
What are the potential impacts of CVE-2025-7061?
Successful exploitation of CVE-2025-7061 can lead to unauthorized data manipulation through CSV injection.
How can I mitigate the risks associated with CVE-2025-7061?
To mitigate CVE-2025-7061, users should upgrade to a version of Intelbras InControl that is not affected by this vulnerability.