Security Advisory

CVE-2018-9010

7.2
HIGH

Vulnerability Description

Intelbras TELEFONE IP TIP200/200 LITE 60.0.75.29 devices allow remote authenticated admins to read arbitrary files via the /cgi-bin/cgiServer.exx page parameter, aka absolute path traversal. In some cases, authentication can be achieved via the admin account with its default admin password.
Published Date March 25, 2018
Official Source NIST NVD Advisory