What’s Vulnerable › Vulnerabilities

CVE-2025-13187: Intelbras ICIP acessodeusuario.xml credentials storage

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2025-11-14 · updated 2026-10-07
• Weakness: CWE-255

Description

A security vulnerability has been detected in Intelbras ICIP 2.0.20. Affected is an unknown function of the file /xml/sistema/acessodeusuario.xml. Such manipulation of the argument NomeUsuario/SenhaAcess leads to unprotected storage of credentials. The attack may be launched remotely. The exploit has been disclosed publicly and may be used.

Affected products

• Intelbras ICIP: 2.0.20

References

• https://vuldb.com/?ctiid.332475
• https://vuldb.com/?id.332475
• https://vuldb.com/?submit.685522
• https://www.notion.so/eldruin/Intelbras-ICIP-Plaintext-Admin-Credentials-Disclosure-29b27474cccb80ff943ff2776d03d7cd
• https://www.notion.so/eldruin/Intelbras-ICIP-Plaintext-Admin-Credentials-Disclosure-CVE-2025-13187-29b27474cccb80ff943ff2776d03d7cd

Get alerted when CVE-2025-13187 or the next vulnerability affects your stack