Back to Database
Status published
High
CVE-2018-9010
Intelbras TELEFONE IP TIP200/200 LITE 60.0.75.29 devices allow remote authenticated...
Vulnerability Description
Intelbras TELEFONE IP TIP200/200 LITE 60.0.75.29 devices allow remote authenticated admins to read arbitrary files via the /cgi-bin/cgiServer.exx page parameter, aka absolute path traversal. In some cases, authentication can be achieved via the admin account with its default admin password.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-9010
Credits & Attribution
No credits recorded in the NVD database.
References
More from intelbras
View All →CVE-2022-43308
INTELBRAS SG 2404 MR 20180928-rel64938 allows authenticated attackers to arbitrarily...
Unknown
0
CVE-2022-40005
Intelbras WiFiber 120AC inMesh before 1-1-220826 allows command injection by...
Unknown
0
CVE-2022-24654
Authenticated stored cross-site scripting (XSS) vulnerability in "Field Server Address"...
Medium
5.4
CVE-2021-3017
The web interface on Intelbras WIN 300 and WRN 342...
High
7.5
CVE-2021-32403
Intelbras Router RF 301K Firmware 1.1.2 is vulnerable to Cross...
High
8.8
Affected Vendor
intelbras
View all reports →Affected Software
tip200 firmware, tip200lite firmware
Vulnerable Versions:
60.0.75.29
Timeline
Official Publish:
March 25th, 2018
Last Modified:
August 5th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.