CVE-2025-13221

MEDIUM

Intelbras UnniTI 24.07.11 - Info Disclosure

Title source: llm
STIX 2.1

Description

A weakness has been identified in Intelbras UnniTI 24.07.11. The affected element is an unknown function of the file /xml/sistema/usuarios.xml. Executing manipulation of the argument Usuario/Senha can lead to unprotected storage of credentials. The attack can be executed remotely. The exploit has been made available to the public and could be exploited.

Scores

CVSS v3 5.3
EPSS 0.0003
EPSS Percentile 10.3%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact partial

Details

CWE
CWE-255 CWE-256
Status published
Products (1)
Intelbras/UnniTI 24.07.11
Published Nov 15, 2025
Tracked Since Feb 18, 2026