CVE-2018-9010

HIGH

Intelbras TIP200/TIP200 LITE Firmware 60.0.75.29 - Authenticated Path Traversal via CGI Parameter

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2018-9010. PoCs published by anhax0r.

AI-analyzed exploit summary This exploit demonstrates a Local File Include (LFI) vulnerability in Intelbras TIP200/200 Lite IP phones, allowing an authenticated attacker to read arbitrary files (e.g., /etc/shadow) via a crafted HTTP request. The PoC uses default admin credentials and saves the retrieved file locally.

Description

Intelbras TELEFONE IP TIP200/200 LITE 60.0.75.29 devices allow remote authenticated admins to read arbitrary files via the /cgi-bin/cgiServer.exx page parameter, aka absolute path traversal. In some cases, authentication can be achieved via the admin account with its default admin password.

Exploits (1)

exploitdb WORKING POC

by anhax0r · pythonwebappshardware

https://www.exploit-db.com/exploits/44317

View Code ZIP pw:eip

This exploit demonstrates a Local File Include (LFI) vulnerability in Intelbras TIP200/200 Lite IP phones, allowing an authenticated attacker to read arbitrary files (e.g., /etc/shadow) via a crafted HTTP request. The PoC uses default admin credentials and saves the retrieved file locally.

Classification

Working Poc 95%

Attack Type

Info Leak

Complexity

Trivial

Reliability

Reliable

Target: Intelbras TELEFONE IP TIP200/200 LITE (version 60.0.75.29)

Auth required

Prerequisites: Network access to the target device · Valid admin credentials (default: admin/admin)

MITRE ATT&CK

T1190 - Exploit Public-Facing Application T1083 - File and Directory Discovery

devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (1)

Core 1

Core References

Exploit, Third Party Advisory, VDB Entry exploit x_refsource_exploit-db

https://www.exploit-db.com/exploits/44317/

Scores

CVSS v3 7.2

EPSS 0.0976

EPSS Percentile 94.9%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-22

Status published

Products (2)

intelbras/tip200_firmware 60.0.75.29

intelbras/tip200lite_firmware 60.0.75.29

Published Mar 25, 2018

Tracked Since Feb 18, 2026