CVE-2019-25472: External Control of File Name or Path

IntelBras Telefone IP TIP200 and 200 LITE contain an unauthenticated arbitrary file read vulnerability in the dumpConfigFile function accessible via the cgiServer.exx endpoint. Attackers can send GET requests to /cgi-bin/cgiServer.exx with the command parameter containing dumpConfigFile to read...

CVE-2020-24285

INTELBRAS TELEFONE IP TIP200 version 60.61.75.22 allows an attacker to obtain sensitive information through /cgi-bin/cgiServer.exx...

PT-2021-11025

Name of the Vulnerable Software and Affected Versions: INTELBRAS TELEFONE IP TIP200 version 60.61.75.22 Description: The issue allows an attacker to obtain sensitive information through the "/cgi-bin/cgiServer.exx" API endpoint. Recommendations: For INTELBRAS TELEFONE IP TIP200 version 60.61.75.2...

CVE-2020-24285: Undefined Security Weakness

INTELBRAS TELEFONE IP TIP200 version 60.61.75.22 allows an attacker to obtain sensitive information through /cgi-bin/cgiServer.exx...

CVE-2018-9010: Improper Limitation of a Pathname to a Restricted Directory

Intelbras TELEFONE IP TIP200/200 LITE 60.0.75.29 devices allow remote authenticated admins to read arbitrary files via the /cgi-bin/cgiServer.exx page parameter, aka absolute path traversal. In some cases, authentication can be achieved via the admin account with its default admin password...

PT-2018-18779

Name of the Vulnerable Software and Affected Versions Intelbras TELEFONE IP TIP200/200 LITE version 60.0.75.29 Description The issue allows remote authenticated admins to read arbitrary files via the "/cgi-bin/cgiServer.exx" page parameter, which is vulnerable to absolute path traversal. In some...

Intelbras Telefone IP TIP200 LITE - Local File Disclosure Vulnerability

Exploit for hardware platform in category web applications Exploit Title: INTELBRAS TELEFONE IP TIP200/200 LITE Local File Include Exploit Author: Matheus Goncalves - anhax0r Vendor Homepage: https://www.facebook.com/anhaxteam/ Software Link: Version: 60.0.75.29 REQUIRED Tested on: Debian CVE : i...