CVE-2024-33109

Directory Traversal in the web interface of the Tiptel IP 286 with firmware version 2.61.13.10 allows attackers to overwrite arbitrary files on the phone via the Ringtone upload function...

CVE-2024-33109

CVE-2024-33109 affects Tiptel IP 286 (firmware 2.61.13.10). The vulnerability is a Directory Traversal in the web interface that enables an attacker to overwrite arbitrary files on the device through the Ringtone upload function. This is supported by multiple sources noting the same flaw and affe...