What’s Vulnerable › Vulnerabilities
CVE-2018-9010
- Severity: high (CVSS 7.2 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 9.7% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2018-03-25 · updated 2026-06-17
- Weakness: CWE-22
Description
Intelbras TELEFONE IP TIP200/200 LITE 60.0.75.29 devices allow remote authenticated admins to read arbitrary files via the /cgi-bin/cgiServer.exx page parameter, aka absolute path traversal. In some cases, authentication can be achieved via the admin account with its default admin password.
Affected products
- Intelbras Tip200 Firmware: 60.0.75.29
- Intelbras Tip200Lite Firmware: 60.0.75.29
References
Get alerted when CVE-2018-9010 or the next vulnerability affects your stack