CVE-2020-13886

Name of the Vulnerable Software and Affected Versions Intelbras TIP 200 version 60.61.75.15 Intelbras TIP 200 LITE version 60.61.75.15 Intelbras TIP 300 version 65.61.75.22

Description The issue allows Directory Traversal via the "cgi-bin/cgiServer.exx" endpoint with the page parameter set to "../". This could potentially allow an attacker to access sensitive files on the device.

Recommendations For Intelbras TIP 200 version 60.61.75.15, consider restricting access to the "cgi-bin/cgiServer.exx" endpoint until a patch is available. For Intelbras TIP 200 LITE version 60.61.75.15, consider restricting access to the "cgi-bin/cgiServer.exx" endpoint until a patch is available. For Intelbras TIP 300 version 65.61.75.22, consider restricting access to the "cgi-bin/cgiServer.exx" endpoint until a patch is available. As a temporary workaround, avoid using the page parameter in the affected endpoint until the issue is resolved.