33 matches found
CVE-2024-36441
Swissphone DiCal-RED 4009 devices allow an unauthenticated attacker use a port-2101 TCP connection to gain access to operation messages that are received by the device...
CVE-2024-36445
Swissphone DiCal-RED 4009 devices allow a remote attacker to gain a root shell via TELNET without authentication...
CVE-2024-36444
cgi-bin/fdmcgiwebv2.cgi on Swissphone DiCal-RED 4009 devices allows an unauthenticated attacker to gain access to device logs...
CVE-2024-36441
Swissphone DiCal-RED 4009 devices allow an unauthenticated attacker use a port-2101 TCP connection to gain access to operation messages that are received by the device...
CVE-2024-36444
cgi-bin/fdmcgiwebv2.cgi on Swissphone DiCal-RED 4009 devices allows an unauthenticated attacker to gain access to device logs...
CVE-2024-36442
cgi-bin/fdmcgiwebv2.cgi on Swissphone DiCal-RED 4009 devices allows an authenticated attacker to gain access to arbitrary files on the device's file system...
CVE-2024-36439
Swissphone DiCal-RED 4009 devices allow a remote attacker to gain access to the administrative web interface via the device password's hash value, without knowing the actual device password...
CVE-2024-36440
An issue was discovered on Swissphone DiCal-RED 4009 devices. An attacker with access to the file /etc/deviceconfig may recover the administrative device password via password-cracking methods, because unsalted MD5 is used...
CVE-2024-36443
Swissphone DiCal-RED 4009 devices allow a remote attacker to gain read access to almost the whole file system via anonymous FTP...
CVE-2024-36443
Swissphone DiCal-RED 4009 devices allow a remote attacker to gain read access to almost the whole file system via anonymous FTP...
CVE-2024-36444
cgi-bin/fdmcgiwebv2.cgi on Swissphone DiCal-RED 4009 devices allows an unauthenticated attacker to gain access to device logs...
CVE-2024-36440
An issue was discovered on Swissphone DiCal-RED 4009 devices. An attacker with access to the file /etc/deviceconfig may recover the administrative device password via password-cracking methods, because unsalted MD5 is used...
CVE-2024-36445
The Swissphone DiCal-RED 4009 radio data module is vulnerable to a Missing Authentication for Critical Function (CWE-306) flaw. A remote attacker can gain a root shell via TELNET without any authentication. The device runs a Linux- and BusyBox-based operating system. While the specific affected v...
CVE-2024-36444
The Swissphone DiCal-RED 4009 radio module is vulnerable to an Improper Authentication (CWE-287) flaw in the cgi-bin/fdmcgiwebv2.cgi endpoint. This vulnerability allows an unauthenticated attacker to gain unauthorized access to device logs . The affected hardware runs a Linux- and BusyBox-based o...
CVE-2024-36442
The Swissphone DiCal-RED 4009 radio data module is vulnerable to a Path Traversal vulnerability (CWE-22) within the cgi-bin/fdmcgiwebv2.cgi endpoint. This flaw allows an authenticated attacker to gain unauthorized access to arbitrary files on the device's file system. The device runs a Linux- and...
CVE-2024-36441
Swissphone DiCal-RED 4009 devices allow an unauthenticated attacker use a port-2101 TCP connection to gain access to operation messages that are received by the device...
CVE-2024-36441
The Swissphone DiCal-RED 4009 radio module is vulnerable to an improper access control issue (CWE-200) that allows an unauthenticated attacker to gain access to sensitive operation messages received by the device. The vulnerability is exploited via a port-2101 TCP connection . This device is used...
CVE-2024-36440
An issue was discovered on Swissphone DiCal-RED 4009 devices. An attacker with access to the file /etc/deviceconfig may recover the administrative device password via password-cracking methods, because unsalted MD5 is used...