CVE-2019-25472

CVE-2019-25472 is a high-severity unauthenticated arbitrary file read vulnerability affecting IntelBras Telefone IP TIP200 and 200 LITE devices. Attackers can exploit this flaw by sending simple GET requests to the cgiServer.exx endpoint, leveraging the dumpConfigFile function to access sensitive system files like /etc/shadow and configuration data without requiring any authentication. With a CVSS score of 7.5 (High), this network-exploitable vulnerability has a low attack complexity and no user interaction, posing a significant risk of confidentiality compromise. Despite its severity, there is currently no evidence of active exploitation, public exploit code (e.g., Metasploit, ExploitDB), or significant community discussion surrounding this CVE.