PT-2025-47063 · Intelbras · Intelbras Unniti

Eldruin · Published 2025-11-15 · Updated 2025-11-15 · CVE-2025-13221

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Intelbras UnniTI version 24.07.11

Description A weakness exists in Intelbras UnniTI 24.07.11 related to the storage of credentials. Manipulation of the Senha argument within the Usuario element of the /xml/sistema/usuarios.xml file can lead to unprotected storage of credentials. The issue can be exploited remotely, and an exploit has been publicly released. The affected element is an unknown function within the specified file.

Recommendations Apply mitigations to prevent manipulation of the Senha argument within the Usuario element of the /xml/sistema/usuarios.xml file.

Exploit

Fix

Weakness Enumeration

CWE-255

CWE-256

Related Identifiers

CVE-2025-13221

Affected Products

Intelbras Unniti

References · 8

• 🔥 https://notion.so/eldruin/Intelbras-UnniTI-Plaintext-Admin-Credentials-Disclosure-29c27474cccb8008b2d7ea60affdf86e?source=copy_link · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-13221 · Security Note
• https://t.me/CVEtracker/37431 · Telegram Post
• https://twitter.com/CVEnew/status/1989783088096772446 · Twitter Post
• https://vuldb.com/?submit.685825 · Note
• https://vuldb.com/?id.332537 · Note
• https://vuldb.com/?ctiid.332537 · Note
• https://t.me/cveNotify/142928 · Telegram Post