High severity · published Mar 11, 2026
CVE-2019-25472
IntelBras Telefone IP TIP200/200 LITE Arbitrary File Read via dumpConfigFile
7.5
CVSS
0.3%
EPSS
No
On KEV
Description
IntelBras Telefone IP TIP200 and 200 LITE contain an unauthenticated arbitrary file read vulnerability in the dumpConfigFile function accessible via the cgiServer.exx endpoint. Attackers can send GET requests to /cgi-bin/cgiServer.exx with the command parameter containing dumpConfigFile() to read sensitive files including /etc/shadow and configuration files without proper authorization.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 23% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TI
Telefone IP TIP 200 · Intelbras
All versions, or not specified · source: vendor
TI
Telefone IP TIP 200 LITE · Intelbras
All versions, or not specified · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2019-25472
CVE.org
https://www.cve.org/CVERecord?id=CVE-2019-25472
backend.intelbras.com
https://backend.intelbras.com/sites/default/files/integration/lamina_tip-200-lite_e_tip-200.pdf
www.exploit-db.com
https://www.exploit-db.com/exploits/47337
www.vulncheck.com
https://www.vulncheck.com/advisories/intelbras-telefone-ip-tip200-200-lite-arbitrary-file-read-via-dumpconfigfile