PT-2025-47063 · Intelbras · Intelbras Unniti

Eldruin · Publicado 2025-11-15 · Atualizado 2025-11-15 · CVE-2025-13221

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Intelbras UnniTI version 24.07.11

Description A weakness exists in Intelbras UnniTI 24.07.11 related to the storage of credentials. Manipulation of the Senha argument within the Usuario element of the /xml/sistema/usuarios.xml file can lead to unprotected storage of credentials. The issue can be exploited remotely, and an exploit has been publicly released. The affected element is an unknown function within the specified file.

Recommendations Apply mitigations to prevent manipulation of the Senha argument within the Usuario element of the /xml/sistema/usuarios.xml file.

Exploit

Correção

Enumeração de Fraquezas

CWE-255

CWE-256

Identificadores relacionados

CVE-2025-13221

Produtos afetados

Intelbras Unniti

Referências · 8

• 🔥 https://notion.so/eldruin/Intelbras-UnniTI-Plaintext-Admin-Credentials-Disclosure-29c27474cccb8008b2d7ea60affdf86e?source=copy_link · Exploit
• https://t.me/CVEtracker/37431 · Publicação no Telegram
• https://twitter.com/CVEnew/status/1989783088096772446 · Publicação no Twitter
• https://vuldb.com/?submit.685825 · Nota
• https://vuldb.com/?id.332537 · Nota
• https://vuldb.com/?ctiid.332537 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2025-13221 · Nota de Segurança
• https://t.me/cveNotify/142928 · Publicação no Telegram