This vulnerability (CVE-2025-13477) involves an authentication bypass in WifiBurada, caused by insufficient protection of credentials, resulting in exposure of private personal information to unauthorized actors. It is categorized under CWE-359 (Exposure of Private Information) and CWE-522 (Insufficiently Protected Credentials). The CVSS v3.1 base score is 7.1 with vector AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N, indicating network attack vector, low attack complexity, requires low privileges, no user interaction, unchanged scope, high confidentiality impact, low integrity impact, and no availability impact. The vendor has not provided any response or patch, and the product is not a cloud service, so remediation is the responsibility of the user or administrator.

The vulnerability allows an attacker with low privileges to bypass authentication and gain unauthorized access to private personal information, resulting in high confidentiality impact. Integrity impact is low, and availability is not affected. This could lead to unauthorized disclosure of sensitive data within affected WifiBurada deployments.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded and no official fix is available, users should consider restricting access to affected WifiBurada instances, applying compensating controls such as network segmentation or enhanced monitoring, and preparing to apply any future patches once released.