CVE-2024-33109

Severity

critical

Source

NVD · cve

Published

2024-09-19

CVSS

9.9

Reference

https://nvd.nist.gov/vuln/detail/CVE-2024-33109

shame 35/100

Directory Traversal in the web interface of the Tiptel IP 286 with firmware version 2.61.13.10 allows attackers to overwrite arbitrary files on the phone via the Ringtone upload function.

Players implicated

ergophone · vendor yealink · vendor sip-t28p · product sip-t28p firmware · product tiptel ip 286 · product tiptel ip 286 firmware · product

Description

Directory Traversal in the web interface of the Tiptel IP 286 with firmware version 2.61.13.10 allows attackers to overwrite arbitrary files on the phone via the Ringtone upload function.

Affected FedRAMP products 0 in the catalog

No correlated FedRAMP products.