CVE-2025-13477CWE-359CWE-522

OTP Bypass in Digital Operation Services' WifiBurada

High · published May 21, 2026

CVSS v3.1
7.1
EPSS
0%
Percentile
12.3
In the wild
Unconfirmed
What it is

Exposure of private personal information to an unauthorized actor, Insufficiently Protected Credentials vulnerability in Digital Operations Services Inc. WifiBurada allows Authentication Bypass.

This issue affects WifiBurada: through 21052026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00224 · 12.3th percentile
Weaknesses
CWE-359 · Exposure of Private Personal Information to an Unauthorized Actor; CWE-522 · Insufficiently Protected Credentials
Published
2026-05-21T12:41Z
EPSS history
Timeline
  • 21 MAY 12:41Z
    OTP Bypass in Digital Operation Services' WifiBurada
    cvelistv5