CVE-2024-39220

Several BAS-IP products, including the AV Series (e.g., AV-01D, AV-02D, AV-03D, AV-04D, AV-05D), AA Series, BA Series, and CR-02BD, are vulnerable in firmware versions prior to v3.9.2 . An authenticated attacker can read SIP account passwords by sending a crafted GET request . This vulnerability ...

CVE-2024-37654

Multiple BAS-IP products, including the AV Series (personal entrance panels), AA Series (apartment entrance panels), and BA Series (visual intercom outdoor entrance panels), are vulnerable to an issue where the web interface stores user credentials in configuration files. A remote attacker can ex...