PT-2020-13082 · Intelbras · Intelbras Tip 300+2

Lucas Souza · Published 2020-11-26 · Updated 2025-06-04 · CVE-2020-12262

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Intelbras TIP200 version 60.61.75.15 Intelbras TIP200LITE version 60.61.75.15 Intelbras TIP300 version 65.61.75.15

Description The issue allows for XSS attacks through the /cgi-bin/cgiServer.exx API endpoint, specifically when the page parameter is exploited. This could potentially lead to malicious script execution.

Recommendations For Intelbras TIP200 version 60.61.75.15, restrict access to the /cgi-bin/cgiServer.exx API endpoint to minimize the risk of exploitation. For Intelbras TIP200LITE version 60.61.75.15, avoid using the page parameter in the affected API endpoint until the issue is resolved. For Intelbras TIP300 version 65.61.75.15, consider disabling the /cgi-bin/cgiServer.exx API endpoint as a temporary workaround until a patch is available.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2020-12262

Affected Products

Intelbras Tip 200

Intelbras Tip 200 Lite

Intelbras Tip 300

References · 7

• 🔥 https://lucxs.medium.com/cve-2020-12262-xss-voip-intelbras-d5697e31fbf6 · Exploit
• 🔥 https://blog.skullsec.com.br/CVE-2020-12262 · Exploit
• 🔥 https://youtube.com/watch?v=rihboOgiJRs · Exploit
• https://osv.dev/vulnerability/CVE-2020-12262 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-12262 · Security Note
• https://t.me/cvenotify/34344 · Telegram Post
• https://twitter.com/pdnuclei_bot/status/1930338775462273450 · Twitter Post