CVE-2018-9010

Intelbras TELEFONE IP TIP200/200 LITE 60.0.75.29 devices allow remote authenticated admins to read arbitrary files via the /cgi-bin/cgiServer.exx page parameter, aka absolute path traversal. In some cases, authentication can be achieved via the admin account with its default admin password.

Score

CVSS 3.1 7.2 High

Status

Modified - cve@mitre.org

Published

2018-03-25

Last modified

2024-08-05

Weaknesses

CWE-22

Affected products

• Tip200 Firmware (Intelbras)
• Tip200lite Firmware (Intelbras)

References

• https://www.exploit-db.com/exploits/44317/