Description
A weakness has been identified in Intelbras UnniTI 24.07.11. The affected element is an unknown function of the file /xml/sistema/usuarios.xml. Executing manipulation of the argument Usuario/Senha can lead to unprotected storage of credentials. The attack can be executed remotely. The exploit has been made available to the public and could be exploited.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Intelbras | UnniTI | 24.07.11 | — |
References
- VDB-332537 | Intelbras UnniTI usuarios.xml credentials storage vdb-entry technical-description
- VDB-332537 | CTI Indicators (IOB, IOC, TTP, IOA) signature permissions-required
- Submit #685825 | Intelbras UnniTI 24.07.11 Unprotected Storage of Credentials third-party-advisory
- https://www.notion.so/eldruin/Intelbras-UnniTI-Plaintext-Admin-Credentials-Disclosure-29c27474cccb8008b2d7ea60affdf86e?source=copy_link exploit