CVE:CVE-2020-12262
CNNVD:CNNVD-202011-1902
Intelbras TIP 200等都是巴西Intelbras公司的产品。Intelbras TIP 200是一款IP电话产品。Intelbras TIP 200 Lite是一款IP电话产品。Intelbras TIP 300是一款IP电话产品。
Intelbras 多款产品存在跨站脚本漏洞，该漏洞源于/cgi-bin/cgiServer.exx?page= 缺少对客户端数据的正确验证，以下产品及版本受到影响：TIP200 60.61.75.15, TIP200LITE 60.61.75.15,  TIP300 65.61.75.15。
solution:Upgrade intelbras tip200_firmware to a higher version than 65.61.75.15,and avoid the version 65.61.75.15; Upgrade intelbras tip200lite_firmware to a higher version than 60.61.75.15,and avoid the version 60.61.75.15; Upgrade intelbras tip300_firmware to a higher version than 60.61.75.15,and avoid the version 60.61.75.15