CVE-2024-36439

Swissphone DiCal-RED 4009 devices allow a remote attacker to gain access to the administrative web interface via the device password's hash value, without knowing the actual device password...

DiCal-RED 4009 Cryptography Failure

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2024-038 Product: DiCal-RED Manufacturer: Swissphone Wireless AG Affected Versions: Unknown Tested Versions: 4009 Vulnerability Type: Use of Password Hash Instead of Password for Authentication CWE-836 Risk Level: Medium Solution...

CVE-2024-36439

The Swissphone DiCal-RED 4009 radio module is vulnerable to a cryptography failure involving the use of password hashes instead of actual passwords for authentication (CWE-836/CWE-269). A remote attacker can exploit this to gain unauthorized access to the administrative web interface without know...