CVE-2024-36440

An issue was discovered on Swissphone DiCal-RED 4009 devices. An attacker with access to the file /etc/deviceconfig may recover the administrative device password via password-cracking methods, because unsalted MD5 is used.

An issue was discovered on Swissphone DiCal-RED 4009 devices. An attacker with access to the file /etc/deviceconfig may recover the administrative device password via password-cracking methods, because unsalted MD5 is used.

Se descubrió un problema en los dispositivos Swissphone DiCal-RED 4009. Un atacante con acceso al archivo /etc/deviceconfig puede recuperar la contraseña del dispositivo administrativo mediante métodos de descifrado de contraseñas, porque se utiliza MD5 sin sal.