CVE-2020-13886

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

Intelbras TIP 200 60.61.75.15, TIP 200 LITE 60.61.75.15, and TIP 300 65.61.75.22 devices allow cgi-bin/cgiServer.exx?page=../ Directory Traversal.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-22

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://github.com/lucxssouza/CVE-2020-13886Exploit, Third Party Advisory
https://lucxs.medium.com/cve-2020-13886-lfi-voip-intelbras-d30f27a39b22Exploit, Third Party Advisory
https://www.youtube.com/watch?v=nNKBRx8IglIExploit, Third Party Advisory
https://github.com/lucxssouza/CVE-2020-13886Exploit, Third Party Advisory
https://lucxs.medium.com/cve-2020-13886-lfi-voip-intelbras-d30f27a39b22Exploit, Third Party Advisory
https://www.youtube.com/watch?v=nNKBRx8IglIExploit, Third Party Advisory

Timeline

Published: Nov 26, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-138878.8documents_add.php in Kordil EDMS through 2.2.60rc3 allows Remote Command Execution because .php files can be uploaded to the documents folde CVE-2020-138885.4Kordil EDMS through 2.2.60rc3 allows stored XSS in users_edit.php, users_management_edit.php, and user_management.php.CVE-2020-138895.4showAlert() in the administration panel in Bludit 3.12.0 allows XSS.CVE-2020-13895.5An information disclosure vulnerability exists when the Windows kernel fails to properly initialize a memory address, aka 'Windows Kernel In CVE-2020-138905.4The Neon theme 2.0 before 2020-06-03 for Bootstrap allows XSS via an Add Task Input operation in a dashboard.CVE-2020-138917.5An issue was discovered in Mattermost Mobile Apps before 1.31.2 on iOS. Unintended third-party servers could sometimes obtain authorization CVE-2020-138925.4The SportsPress plugin before 2.7.2 for WordPress allows XSS.CVE-2020-138935.4Multiple stored cross-site scripting (XSS) vulnerabilities in Sage EasyPay 10.7.5.10 allow authenticated attackers to inject arbitrary web s CVE-2020-138947.5handler/upload_handler.jsp in DEXT5 Editor through 3.5.1402961 allows an attacker to download arbitrary files via the savefilepath field.CVE-2020-138958.8Crypt::Perl::ECDSA in the Crypt::Perl (aka p5-Crypt-Perl) module before 0.32 for Perl fails to verify correct ECDSA signatures when r and s CVE-2020-138965.3The web interface of Maipu MP1800X-50 7.5.3.14(R) devices allows remote attackers to obtain sensitive information via the form/formDeviceVer CVE-2020-138976.1HESK before 3.1.10 allows reflected XSS.