CVE-2019-25472

HIGH 7.5

IntelBras Telefone IP TIP200/200 LITE Arbitrary File Read via dumpConfigFile

CVSS Score

7.5

EPSS Score

0.0%

EPSS Percentile

0th

IntelBras Telefone IP TIP200 and 200 LITE contain an unauthenticated arbitrary file read vulnerability in the dumpConfigFile function accessible via the cgiServer.exx endpoint. Attackers can send GET requests to /cgi-bin/cgiServer.exx with the command parameter containing dumpConfigFile() to read sensitive files including /etc/shadow and configuration files without proper authorization.

CWE	CWE-73
Vendor	intelbras
Product	telefone ip tip 200
Published	Mar 11, 2026
Last Updated	Apr 7, 2026

Stay Ahead of the Next One

Get instant alerts for intelbras telefone ip tip 200

Be the first to know when new high vulnerabilities affecting intelbras telefone ip tip 200 are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Affected Versions

Intelbras / Telefone IP TIP 200

Intelbras / Telefone IP TIP 200 LITE

References

NVD ↗ CVE.org ↗ EPSS Data ↗

exploit-db.com: https://www.exploit-db.com/exploits/47337 backend.intelbras.com: https://backend.intelbras.com/sites/default/files/integration/lamina_tip-200-lite_e_tip-200.pdf vulncheck.com: https://www.vulncheck.com/advisories/intelbras-telefone-ip-tip200-200-lite-arbitrary-file-read-via-dumpconfigfile

Credits

Todor Donev