CVE-2020-24285

HighCVSS 7.5

Published: 12/04/2021(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

4.50%

90th percentile - higher than 90% of all known CVEs

Summary

A vulnerability in INTELBRAS TIP200 IP phone version 60.61.75.22 allows an attacker to access sensitive information via the /cgi-bin/cgiServer.exx endpoint.

Risk Assessment

An attacker can obtain confidential data such as device configuration or credentials, potentially leading to further network attacks.

Recommendation

Immediately update the firmware to the latest version and restrict access to the management interface to trusted networks only.

Original NVD description (English source)

INTELBRAS TELEFONE IP TIP200 version 60.61.75.22 allows an attacker to obtain sensitive information through /cgi-bin/cgiServer.exx.