high7.2Public exploit code
CVE-2018-9010
Intelbras TELEFONE IP TIP200/200 LITE 60.0.75.29 devices allow remote authenticated admins to read arbitrary files via the /cgi-bin/cgiServer.exx page paramete…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Intelbras Telefone IP TIP200 LITE - Local File Disclosure2018-03-20 · webapps · hardware
Impact
Intelbras TELEFONE IP TIP200/200 LITE 60.0.75.29 devices allow remote authenticated admins to read arbitrary files via the /cgi-bin/cgiServer.exx page parameter, aka absolute path traversal. In some cases, authentication can be achieved via the admin account with its default admin password.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Intelbras | Tip200 Firmware | Version 60.0.75.29 |
| Intelbras | Tip200lite Firmware | Version 60.0.75.29 |