CVE-2018-9010

Description

Intelbras TELEFONE IP TIP200/200 LITE 60.0.75.29 devices allow remote authenticated admins to read arbitrary files via the /cgi-bin/cgiServer.exx page parameter, aka absolute path traversal. In some cases, authentication can be achieved via the admin account with its default admin password.

References

https://www.exploit-db.com/exploits/44317/

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3