CVE-2019-25472

HIGH

IntelBras TIP200/TIP200 LITE - Info Disclosure

Title source: llm

Description

IntelBras Telefone IP TIP200 and 200 LITE contain an unauthenticated arbitrary file read vulnerability in the dumpConfigFile function accessible via the cgiServer.exx endpoint. Attackers can send GET requests to /cgi-bin/cgiServer.exx with the command parameter containing dumpConfigFile() to read sensitive files including /etc/shadow and configuration files without proper authorization.

Exploits (1)

exploitdb WORKING POC

by Todor Donev · perlremotehardware

https://www.exploit-db.com/exploits/47337

View Code ZIP pw:eip

References (3)

[Various Sources] https://backend.intelbras.com/sites/default/files/integration/lamina_tip-200-lite_e_tip-200.pdf

[Exploit, Third Party Advisory] https://www.exploit-db.com/exploits/47337

[Third Party Advisory] https://www.vulncheck.com/advisories/intelbras-telefone-ip-tip200-200-lite-arbitrary-file-read-via-dumpconfigfile

Scores

CVSS v3 7.5

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Classification

CWE

CWE-73

Status draft

Timeline

Published Mar 11, 2026

Tracked Since Mar 12, 2026