CVE-2024-36439

Swissphone DiCal-RED 4009 devices allow a remote attacker to gain access to the administrative web interface via the device password's hash value, without knowing the actual device password...

DiCal-RED 4009 Cryptography Failure

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2024-038 Product: DiCal-RED Manufacturer: Swissphone Wireless AG Affected Versions: Unknown Tested Versions: 4009 Vulnerability Type: Use of Password Hash Instead of Password for Authentication CWE-836 Risk Level: Medium Solution...

CVE-2024-36439

The Swissphone DiCal-RED 4009 radio data module is vulnerable to a cryptography failure (CWE-836 ) where it allows a remote attacker to gain access to the administrative web interface by using the device password's hash value instead of the actual password. The affected software runs on a Linux- ...