CVE-2024-36441

Swissphone DiCal-RED 4009 devices allow an unauthenticated attacker use a port-2101 TCP connection to gain access to operation messages that are received by the device...

CVE-2024-36445

Swissphone DiCal-RED 4009 devices allow a remote attacker to gain a root shell via TELNET without authentication...

CVE-2024-36444

cgi-bin/fdmcgiwebv2.cgi on Swissphone DiCal-RED 4009 devices allows an unauthenticated attacker to gain access to device logs...

CVE-2024-36441

Swissphone DiCal-RED 4009 devices allow an unauthenticated attacker use a port-2101 TCP connection to gain access to operation messages that are received by the device...

CVE-2024-36442

cgi-bin/fdmcgiwebv2.cgi on Swissphone DiCal-RED 4009 devices allows an authenticated attacker to gain access to arbitrary files on the device's file system...

CVE-2024-36444

cgi-bin/fdmcgiwebv2.cgi on Swissphone DiCal-RED 4009 devices allows an unauthenticated attacker to gain access to device logs...

CVE-2024-36440

An issue was discovered on Swissphone DiCal-RED 4009 devices. An attacker with access to the file /etc/deviceconfig may recover the administrative device password via password-cracking methods, because unsalted MD5 is used...

CVE-2024-36439

Swissphone DiCal-RED 4009 devices allow a remote attacker to gain access to the administrative web interface via the device password's hash value, without knowing the actual device password...

CVE-2024-36443

Swissphone DiCal-RED 4009 devices allow a remote attacker to gain read access to almost the whole file system via anonymous FTP...

CVE-2024-36442: Files or Directories Accessible to External Parties

cgi-bin/fdmcgiwebv2.cgi on Swissphone DiCal-RED 4009 devices allows an authenticated attacker to gain access to arbitrary files on the device's file system...

CVE-2024-36440: Use of a Broken or Risky Cryptographic Algorithm

An issue was discovered on Swissphone DiCal-RED 4009 devices. An attacker with access to the file /etc/deviceconfig may recover the administrative device password via password-cracking methods, because unsalted MD5 is used...

PT-2024-27002 · Swissphone · Swissphone Dical-Red 4009

Name of the Vulnerable Software and Affected Versions: Swissphone DiCal-RED 4009 affected versions not specified Description: The issue allows an authenticated attacker to gain access to arbitrary files on the device's file system through the cgi-bin/fdmcgiwebv2.cgi endpoint. Recommendations: At...

CVE-2024-36441: Improper Access Control

Swissphone DiCal-RED 4009 devices allow an unauthenticated attacker use a port-2101 TCP connection to gain access to operation messages that are received by the device...

CVE-2024-36441

Swissphone DiCal-RED 4009 devices allow an unauthenticated attacker use a port-2101 TCP connection to gain access to operation messages that are received by the device...

CVE-2024-36441

The Swissphone DiCal-RED 4009 radio module is vulnerable to an improper access control issue (CWE-200) that allows an unauthenticated attacker to gain access to sensitive operation messages received by the device. The vulnerability is exploited via a port-2101 TCP connection . This device is used...

PT-2024-27004 · Swissphone · Swissphone Dical-Red 4009

Name of the Vulnerable Software and Affected Versions: Swissphone DiCal-RED 4009 devices affected versions not specified Description: The issue allows an unauthenticated attacker to gain access to device logs through the cgi-bin/fdmcgiwebv2.cgi endpoint on Swissphone DiCal-RED 4009 devices...

PT-2024-27000 · Swissphone · Swissphone Dical-Red 4009

Name of the Vulnerable Software and Affected Versions: Swissphone DiCal-RED 4009 devices affected versions not specified Description: An issue was discovered on Swissphone DiCal-RED 4009 devices, where an attacker with access to the file /etc/deviceconfig may recover the administrative device...

CVE-2024-36443

Swissphone DiCal-RED 4009 devices allow a remote attacker to gain read access to almost the whole file system via anonymous FTP...

CVE-2024-36440

An issue was discovered in Swissphone DiCal-RED 4009 devices where the administrative device password can be recovered using password-cracking methods. This is caused by the use of unsalted MD5 hashing within the /etc/deviceconfig file. While the specific affected versions are not stated, the vul...

CVE-2024-36444

The Swissphone DiCal-RED 4009 radio module is vulnerable to an Improper Authentication (CWE-287) flaw in the cgi-bin/fdmcgiwebv2.cgi endpoint. This vulnerability allows an unauthenticated attacker to gain unauthorized access to device logs . The affected hardware runs a Linux- and BusyBox-based o...