Intelbras InControl Cleartext Transmission Vulnerability in Registered User Handler

A vulnerability exists in Intelbras InControl versions through 2.21.58, specifically within the Registered User Handler component. The issue arises in an unknown part of the code related to the file '/v1/usuario/', where sensitive information is transmitted in cleartext. This vulnerability can be exploited remotely, although the complexity of the attack is considered high, making exploitation difficult.

Impact

Exploitation of this vulnerability leads to the cleartext transmission of sensitive information, such as passwords.

Remediation

Users are advised to upgrade to Intelbras InControl version 2.21.59 to address this vulnerability.