CVE-2024-36442

Summary

cgi-bin/fdmcgiwebv2.cgi on Swissphone DiCal-RED 4009 devices allows an authenticated attacker to gain access to arbitrary files on the device's file system.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• http://seclists.org/fulldisclosure/2024/Aug/33

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: no
  • Technical Impact: total

References

• https://www.swissphone.com/en-us/solutions/components/terminals/radio-data-module-dical-red/
• https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2024-039.txt

• ←Previous
• Next→