Description
IntelBras Telefone IP TIP200 and 200 LITE contain an unauthenticated arbitrary file read vulnerability in the dumpConfigFile function accessible via the cgiServer.exx endpoint. Attackers can send GET requests to /cgi-bin/cgiServer.exx with the command parameter containing dumpConfigFile() to read sensitive files including /etc/shadow and configuration files without proper authorization.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Intelbras | Telefone IP TIP 200 | — | — |
| Intelbras | Telefone IP TIP 200 LITE | — | — |
References
- ExploitDB-47337 exploit
- Intelbras Product Documentation product
- VulnCheck Advisory: IntelBras Telefone IP TIP200/200 LITE Arbitrary File Read via dumpConfigFile third-party-advisory