CVE-2024-39220

Several BAS-IP products, including the AV Series (e.g., AV-01D, AV-02D, AV-03D, AV-04D, AV-05D), AA Series, BA Series, and CR-02BD, are vulnerable in firmware versions prior to v3.9.2 . An authenticated attacker can read SIP account passwords by sending a crafted GET request . This vulnerability ...

PT-2024-28395 · Bas Ip · Bas-Ip Cr-02Bd

Name of the Vulnerable Software and Affected Versions: BAS-IP CR-02BD versions prior to firmware v3.9.2 Description: The issue allows authenticated attackers to read SIP account passwords via a crafted GET request. Recommendations: For BAS-IP CR-02BD versions prior to firmware v3.9.2, update to...

CVE-2024-37654

Multiple BAS-IP products, including the AV Series (personal entrance panels), AA Series (apartment entrance panels), and BA Series (visual intercom outdoor entrance panels), are vulnerable to an issue where the web interface stores user credentials in configuration files. A remote attacker can ex...