An issue was discovered on Swissphone DiCal-RED 4009...
Moderate severity
Unreviewed
Published
Aug 22, 2024
to the GitHub Advisory Database
•
Updated Aug 22, 2024
Description
Published by the National Vulnerability Database
Aug 22, 2024
Published to the GitHub Advisory Database
Aug 22, 2024
Last updated
Aug 22, 2024
An issue was discovered on Swissphone DiCal-RED 4009 devices. An attacker with access to the file /etc/deviceconfig may recover the administrative device password via password-cracking methods, because unsalted MD5 is used.
References