Paper/Archive/CVE-2024-33109

CVE-2024-33109

ergophone tiptel_ip_286_firmware — Directory Traversal in the web interface of the Tiptel IP 286 with firmware version 2.61.13.10 allows attackers to overwrite arbitrary fi…

EPSS 0.9%CVSS 9.9

critical.is priorityof 100

CVSS 9.9 (CNA)9.9 / 10 × 3029.7 Not in CISA KEV+300.0 EPSS percentile 58.3.583 × 2011.7 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

Directory Traversal in the web interface of the Tiptel IP 286 with firmware version 2.61.13.10 allows attackers to overwrite arbitrary files on the phone via the Ringtone upload function.

Affected

ProductAffectedFixed inSource

n/an/a–CNA

tiptel_ip_286_firmware≤ 2.61.13.10–CISA-ADP

Scores by source

mitre (CNA)9.9CVSS:3.1/AC:L/AV:N/A:L/C:H/I:H/PR:L/S:C/UI:N

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refbdosecurity.de/en-gb/advisories/cve-2024-33109