Intelbras TIP200 60.61.75.15, TIP200LITE 60.61.75.15, and TIP300 65.61.75.15 devices allow /cgi-bin/cgiServer.exx?page= XSS.
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
Link | Tags |
---|---|
https://www.youtube.com/watch?v=rihboOgiJRs | third party advisory exploit |
https://blog.skullsec.com.br/CVE-2020-12262/ | third party advisory exploit |
https://lucxs.medium.com/cve-2020-12262-xss-voip-intelbras-d5697e31fbf6 | third party advisory exploit |