CVE-2025-13187: Intelbras ICIP acessodeusuario.xml credentials storage

Published Nov 14, 2025

Updated

A security vulnerability has been detected in Intelbras ICIP 2.0.20. Affected is an unknown function of the file /xml/sistema/acessodeusuario.xml. Such manipulation of the argument NomeUsuario/SenhaAcess leads to unprotected storage of credentials. The attack may be launched remotely. The exploit has been disclosed publicly and may be used.

Affected Software

3 affected components

Intelbras ICIP

All of the following

Intelbras Icip 30 Firmware=2.0.20

Intelbras Icip 30

Event History

Nov 14, 2025

CVE Published

via MITRE·10:02 PM

Data Sourced

via MITRE·10:02 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·10:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-13187?

CVE-2025-13187 is considered a significant security vulnerability due to its potential for exposing unprotected user credentials.

How do I fix CVE-2025-13187?

To fix CVE-2025-13187, ensure that proper access controls and encryption mechanisms are implemented for the storage of credentials.

What products are affected by CVE-2025-13187?

CVE-2025-13187 affects the Intelbras ICIP product.

What type of attack does CVE-2025-13187 allow?

CVE-2025-13187 allows for remote attacks that can manipulate user credentials due to unprotected storage.

What are the implications of CVE-2025-13187 for my organization?

The implications of CVE-2025-13187 include potential unauthorized access to sensitive systems and data due to exposed credentials.