Approved changes feed: RSS · Atom

cpe:2.3:h:swissphone:dical-red_4009:*:*:*:*:*:*:*:*

part: h version: * update: *

VendorSwissphone (ba2ae6de-c5b7-5e48-b9c0-03fa31d100a2)
ProductDical Red 4009 (5e7385c6-c16b-56cc-89d2-9414fe8ee7ec)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-36445 vulnerable 2026-06-08 06:39:45.002167 Details available
Swissphone DiCal-RED 4009 devices allow a remote attacker to gain a root shell via TELNET without authentication.
Published: 2024-08-22T00:00:00.000Z
Updated: 2024-08-22T23:03:15.480Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-36444 vulnerable 2026-06-08 06:39:45.001793 Details available
cgi-bin/fdmcgiwebv2.cgi on Swissphone DiCal-RED 4009 devices allows an unauthenticated attacker to gain access to device logs.
Published: 2024-08-22T00:00:00.000Z
Updated: 2024-08-26T14:13:09.426Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-36443 under_investigation 2026-06-08 06:39:45.001341 Details available
Swissphone DiCal-RED 4009 devices allow a remote attacker to gain read access to almost the whole file system via anonymous FTP.
Published: 2024-08-22T00:00:00.000Z
Updated: 2024-08-22T23:03:12.482Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-36441 under_investigation 2026-06-08 06:39:45.000413 Details available
Swissphone DiCal-RED 4009 devices allow an unauthenticated attacker use a port-2101 TCP connection to gain access to operation messages that are received by the device.
Published: 2024-08-22T00:00:00.000Z
Updated: 2024-08-23T00:09:12.571Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-36439 vulnerable 2026-06-08 06:39:44.997781 Details available
Swissphone DiCal-RED 4009 devices allow a remote attacker to gain access to the administrative web interface via the device password's hash value, without knowing the actual device password.
Published: 2024-08-22T00:00:00.000Z
Updated: 2024-08-28T00:09:14.315Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.