Swissphone vulnerabilities
We track 2 vulnerabilities in Swissphone products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on August 22, 2024.
2vulnerabilities
1critical
1high
0exploited
9.1average CVSS score
Latest Swissphone vulnerabilities
- 8.8 High severity
dical-red: Files or Directories Accessible to External Parties
cgi-bin/fdmcgiwebv2.cgi on Swissphone DiCal-RED 4009 devices allows an authenticated attacker to gain access to arbitrary files on the device's file system.
- 9.4 Critical severity
dical-red_4009: Improper Privilege Management
Swissphone DiCal-RED 4009 devices allow a remote attacker to gain access to the administrative web interface via the device password's hash value, without knowing the actual device password.