intelbras has 4 CVEs on record between 2021 and 2026. 1 was published in the last 90 days. The median CVSS is 5.3 (medium).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 5.3
- Publish → KEV
- —
- Last 90 days
- 1 prev 0
Products
- TIP 125i 1
- ata_200_firmware 1
- icip_30_firmware 1
- tip200_firmware 1
Worst active — by depth score
CVE-2020-24285High· 7.5INTELBRAS TELEFONE IP TIP200 version 60.61.75.22 allows an attacker to obtain sensitive information through /cgi-bin/cgiServer.exx.54CVE-2022-24654Medium· 5.4Authenticated stored cross-site scripting (XSS) vulnerability in "Field Server Address" field in INTELBRAS ATA 200 Firmware 74.19.10.21 allows attackers to inject JavaScript code through a crafted payload.42CVE-2026-101265Low· 3.1A vulnerability was identified in Intelbras TIP 125i 4.3.35/4.3.4129CVE-2025-13187Medium· 5.3A security vulnerability has been detected in Intelbras ICIP 2.0.2029
intelbras vulnerabilities
CVEs affecting intelbras, newest first. Open any entry for full detail, references, and exploit status.
4 CVEsRSS
CVE-2026-101265Low· 3.1PoCA vulnerability was identified in Intelbras TIP 125i 4.3.35/4.3.41
A vulnerability was identified in Intelbras TIP 125i 4.3.35/4.3.41. The affected element is an unknown function of the component Básico Page. Such manipulation leads to inclusion of sensitive information in source code. The attack can be…
CVE-2025-13187Medium· 5.3A security vulnerability has been detected in Intelbras ICIP 2.0.20
A security vulnerability has been detected in Intelbras ICIP 2.0.20. Affected is an unknown function of the file /xml/sistema/acessodeusuario.xml. Such manipulation of the argument NomeUsuario/SenhaAcess leads to unprotected storage of c…
CVE-2022-24654Medium· 5.4PoCAuthenticated stored cross-site scripting (XSS) vulnerability in "Field Server Address" field in INTELBRAS ATA 200 Firmware 74.19.10.21 allows attackers to inject JavaScript code through a crafted payload.
Authenticated stored cross-site scripting (XSS) vulnerability in "Field Server Address" field in INTELBRAS ATA 200 Firmware 74.19.10.21 allows attackers to inject JavaScript code through a crafted payload.
CVE-2020-24285High· 7.5PoCINTELBRAS TELEFONE IP TIP200 version 60.61.75.22 allows an attacker to obtain sensitive information through /cgi-bin/cgiServer.exx.
INTELBRAS TELEFONE IP TIP200 version 60.61.75.22 allows an attacker to obtain sensitive information through /cgi-bin/cgiServer.exx.