CVE-2024-33109 | THREATINT

We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Description

Directory Traversal in the web interface of the Tiptel IP 286 with firmware version 2.61.13.10 allows attackers to overwrite arbitrary files on the phone via the Ringtone upload function.

Reserved 2024-04-23 | Published 2024-09-19 | Updated 2024-09-20 | Assigner mitre

CRITICAL: 9.9CVSS:3.1/AC:L/AV:N/A:L/C:H/I:H/PR:L/S:C/UI:N

References

tiptel.com

www.bdosecurity.de/en-gb/advisories/cve-2024-33109

cve.org (CVE-2024-33109)

nvd.nist.gov (CVE-2024-33109)

Download JSON

https://cve.threatint.com/CVE/CVE-2024-33109

Support options

Helpdesk Chat, Email, Knowledgebase
Telegram Chat

Subscribe to our newsletter to learn more about our work.