CVE-2024-39220

Several BAS-IP products, including the AV Series (e.g., AV-01D, AV-02D, AV-03D, AV-04D, AV-05D), AA Series, BA Series, and CR-02BD, are vulnerable in firmware versions prior to v3.9.2 . An authenticated attacker can read SIP account passwords by sending a crafted GET request . This vulnerability ...