CVE-2025-13187

CVE Database · CVE-2025-13187

CVE-2025-13187

· MEDIUMAnalyzed

CVSS v3.1

5.3

CVSS v4.0

5.5

EPSS

0.46%

Published

Nov 14, 2025

Modified

Feb 4, 2026

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

A security vulnerability has been detected in Intelbras ICIP 2.0.20. Affected is an unknown function of the file /xml/sistema/acessodeusuario.xml. Such manipulation of the argument NomeUsuario/SenhaAcess leads to unprotected storage of credentials. The attack may be launched remotely. The exploit has been disclosed publicly and may be used.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weaknesses (CWE)

CWE-255CWE-256CWE-522

Affected Products (2)

intelbras · icip_30_firmwarevulnerable

intelbras · icip_30

References (5)

https://vuldb.com/?ctiid.332475

Permissions RequiredVDB Entry

https://vuldb.com/?id.332475

Third Party AdvisoryVDB Entry