CVE-2024-33109

critical

Description

Directory Traversal in the web interface of the Tiptel IP 286 with firmware version 2.61.13.10 allows attackers to overwrite arbitrary files on the phone via the Ringtone upload function.

References

https://www.bdosecurity.de/en-gb/advisories/cve-2024-33109

http://tiptel.com

Details

Source: Mitre, NVD

Published: 2024-09-19

Updated: 2024-09-25

Risk Information

CVSS v2

Base Score: 10

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Severity: Critical

CVSS v3

Base Score: 9.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H