CVE-2018-9010

7.2 highEPSS 9.7%

Intelbras TELEFONE IP TIP200/200 LITE 60.0.75.29 devices allow remote authenticated admins to read arbitrary files via the /cgi-bin/cgiServer.exx page parameter, aka absolute path traversal. In some cases, authentication can be achieved via the admin account with its default admin password.

Severity

CVSS 3.1

7.2 high

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS: 9.7% chance of exploitation in the next 30 days; higher than 95% of CVEs (scores of 2026-10-31)
CWE: CWE-22
Published: 2018-03-25
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

intelbras:tip200_firmware
intelbras:tip200lite_firmware

References

https://www.exploit-db.com/exploits/44317/
https://www.exploit-db.com/exploits/44317/

Check your stack JSON