1## autogenerated on 2025-12-17 15:04:34
2name: crowdsecurity/vpatch-CVE-2025-13315
3description: 'Detects unauthenticated access to Twonky Server log file exposure endpoint.'
4rules:
5  - zones:
6      - URI
7    transform:
8      - lowercase
9    match:
10      type: equals
11      value: /nmc/rpc/log_getfile
12
13labels:
14  type: exploit
15  service: http
16  confidence: 3
17  spoofable: 0
18  behavior: 'http:exploit'
19  label: "Twonky Server - Information Disclosure"
20  classification:
21    - cve.CVE-2025-13315
22    - attack.T1190
23    - cwe.CWE-306
24