CVE-2024-36439

CRITICAL Year: 2024
CVSS v3 Score
9.4
Critical
Weakness Type
CWE-269
View all →

Vulnerability Description

Swissphone DiCal-RED 4009 devices allow a remote attacker to gain access to the administrative web interface via the device password's hash value, without knowing the actual device password.

Related Vulnerabilities

CVE-2018-4008

CRITICAL
CVSS:9.3(Critical)

An exploitable privilege escalation vulnerability exists in the Shimo VPN 4.1.5.1 helper service in the RunVpncScript command. The command takes a user-supplied script argument and executes it under r...

CWE-2692018

CVE-2020-27352

CRITICAL
CVSS:9.3(Critical)

When generating the systemd service units for the docker snap (and other similar snaps), snapd does not specify Delegate=yes - as a result systemd will move processes from the containers created and m...

CWE-2692020

CVE-2022-3405

CRITICAL
CVSS:9.3(Critical)

Code execution and sensitive information disclosure due to excessive privileges assigned to Acronis Agent. The following products are affected: Acronis Cyber Protect 15 (Windows, Linux) before build 2...

CWE-2692022

CVE-2012-5376

CRITICAL
CVSS:9.6(Critical)

The Inter-process Communication (IPC) implementation in Google Chrome before 22.0.1229.94 allows remote attackers to bypass intended sandbox restrictions and write to arbitrary files by leveraging acc...

CWE-2692012

CVE-2019-13690

CRITICAL
CVSS:9.6(Critical)

Inappropriate implementation in OS in Google Chrome on ChromeOS prior to 75.0.3770.80 allowed a remote attacker to perform OS-level privilege escalation via a malicious file. (Chromium security severi...

CWE-2692019

CVE-2017-5142

CRITICAL
CVSS:9.1(Critical)

An issue was discovered in Honeywell XL Web II controller XL1000C500 XLWebExe-2-01-00 and prior, and XLWeb 500 XLWebExe-1-02-08 and prior. A user with low privileges is able to open and change the par...

CWE-2692017