CVE-2025-13221CWE-256

CVE-2025-13221

Medium · published November 16, 2025

CVSS v3.1
5.3
EPSS
0%
Percentile
31.9
In the wild
Unconfirmed
What it is

A weakness has been identified in Intelbras UnniTI 24.07.11. The affected element is an unknown function of the file /xml/sistema/usuarios.xml. Executing manipulation of the argument Usuario/Senha can lead to unprotected storage of credentials. The attack can be executed remotely. The exploit has been made available to the public and could be exploited.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00390 · 31.9th percentile
Weakness
CWE-256 · Plaintext Storage of a Password
Published
2025-11-16T01:15Z
References (4)
https://vuldb.com/?ctiid.332537 · [email protected]https://vuldb.com/?id.332537 · [email protected]https://vuldb.com/?submit.685825 · [email protected]https://www.notion.so/eldruin/Intelbras-UnniTI-Plaintext-Admin-Credentials-Disclosure-29c27474cccb8008b2d7ea60affdf86e?source=copy_link · [email protected]
EPSS history
Timeline
  • 15 NOV 19:32Z
    Intelbras UnniTI usuarios.xml credentials storage
    cvelistv5