CVE-2020-13886

Intelbras TIP 200/200 LITE/300 are affected by a Local File Inclusion vulnerability in /cgi-bin/cgiServer.exx via the page parameter (e.g., page=..%). Unauthenticated attackers can read arbitrary files (notably /etc/passwd), potentially leading to device compromise. Affected models and firmware s...

CVE-2020-13886

Intelbras TIP 200 60.61.75.15, TIP 200 LITE 60.61.75.15, and TIP 300 65.61.75.22 devices allow cgi-bin/cgiServer.exx?page=../ Directory Traversal...

PT-2020-13751 · Intelbras · Intelbras Tip 200 Lite +2

Name of the Vulnerable Software and Affected Versions: Intelbras TIP 200 version 60.61.75.15 Intelbras TIP 200 LITE version 60.61.75.15 Intelbras TIP 300 version 65.61.75.22 Description: The issue allows Directory Traversal via the "cgi-bin/cgiServer.exx" endpoint with the page parameter set to...

Cross-Site Scripting Vulnerability in Multiple Intelbras Products

Intelbras TIP 200 and others are products of the Brazilian company Intelbras.Intelbras TIP 200 is an IP phone product.Intelbras TIP 200 Lite is an IP phone product.Intelbras TIP 300 is an IP phone product. A cross-site scripting vulnerability exists in several Intelbras products, which originates...

Multiple Intelbras Product Path Traversal Vulnerabilities

Intelbras Intelbras TIP 200 is an IP phone product from Intelbras, Brazil. The device is an IP terminal that supports up to two SIP accounts, with high voice quality HD Voice, LCD 2x15, power PoE Power over Ethernet, etc. Intelbras Intelbras TIP 200 Lite is an IP telephony product from Intelbras,...

PT-2020-13082 · Intelbras · Intelbras Tip 200 Lite +2

Name of the Vulnerable Software and Affected Versions: Intelbras TIP200 version 60.61.75.15 Intelbras TIP200LITE version 60.61.75.15 Intelbras TIP300 version 65.61.75.15 Description: The issue allows for XSS attacks through the /cgi-bin/cgiServer.exx API endpoint, specifically when the page...

Intelbras Wireless N Authentication Bypass (CVE-2019-19142)

An authentication bypass vulnerability exists in Intelbras Wireless N. Successful exploitation of this vulnerability could allow a remote attacker to gain unauthorized access to the affected system...

Intelbras CIP 92200 Cross-Site Request Forgery Vulnerability

Intelbras CIP 92200 is a VoIP switch from Intelbras Poland. A cross-site request forgery vulnerability exists in the Intelbras CIP 92200 that stems from the program failing to properly validate user input. A remote attacker could use this vulnerability to access the panel and perform capture...

Intelbras RF1200 Cross-Site Request Forgery Vulnerability

The Intelbras RF1200 is a wireless router from Intelbras Brazil. A cross-site request forgery vulnerability exists in Intelbras RF1200 version 1.1.3. An attacker can exploit this vulnerability to bypass the login.html form...

CVE-2019-19517

Intelbras RF1200 1.1.3 devices allow CSRF to bypass the login.html form, as demonstrated by launching a scrapy process...

CVE-2019-19517

Intelbras RF1200 1.1.3 devices allow CSRF to bypass the login.html form, as demonstrated by launching a scrapy process...

CVE-2020-8829

CSRF on Intelbras CIP 92200 devices allows an attacker to access the panel and perform scraping or other analysis...

Cross site request forgery (csrf)

Intelbras RF1200 1.1.3 devices allow CSRF to bypass the login.html form, as demonstrated by launching a scrapy process...

Cross site request forgery (csrf)

CSRF on Intelbras CIP 92200 devices allows an attacker to access the panel and perform scraping or other analysis...

CVE-2020-8829

CVE-2020-8829 is a CSRF vulnerability in Intelbras CIP 92200 (VoIP switch). Multiple connected sources describe that an attacker can access the panel and perform scraping or similar analysis due to inadequate request validation. Root cause is described in CNVD-2020-35468 as failing to properly va...

CVE-2020-8829

CSRF on Intelbras CIP 92200 devices allows an attacker to access the panel and perform scraping or other analysis...

CVE-2019-19517

CVE-2019-19517 concerns Intelbras RF1200 firmware version 1.1.3 where a Cross-Site Request Forgery (CSRF) vulnerability allows bypass of the login.html form. The vulnerability is described in multiple sources as enabling an attacker to bypass authentication, demonstrated by launching a scrapy pro...

CVE-2019-19517

Intelbras RF1200 1.1.3 devices allow CSRF to bypass the login.html form, as demonstrated by launching a scrapy process...

Intelbras Wireless N 150Mbps WRN240 Authentication Bypass

Exploit Title: Intelbras Wireless N 150Mbps WRN240 - Authentication Bypass Config Upload Date: 2019-11-20 Exploit Author: Elber Tavares Vendor Homepage: https://www.intelbras.com/ Software Link: http://en.intelbras.com.br/node/1033 Version: Intelbras Wireless N 150Mbps - WRN240 Tested on: linux,...

Intelbras Wireless N 150Mbps WRN240 - Authentication Bypass (Config Upload)

Exploit Title: Intelbras Wireless N 150Mbps WRN240 - Authentication Bypass Config Upload Date: 2019-11-20 Exploit Author: Elber Tavares Vendor Homepage: https://www.intelbras.com/ Software Link: http://en.intelbras.com.br/node/1033 Version: Intelbras Wireless N 150Mbps - WRN240 Tested on: linux,...