CVE-2018-9010

Publication date

2018-03-25 18:00:00

Family

mitre

State

PUBLISHED

Description

Intelbras TELEFONE IP TIP200/200 LITE 60.0.75.29 devices allow remote authenticated admins to read arbitrary files via the /cgi-bin/cgiServer.exx page parameter, aka absolute path traversal. In some cases, authentication can be achieved via the admin account with its default admin password.