CVE-2024-36442: Swissphone Dical-Red

High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days.

cgi-bin/fdmcgiwebv2.cgi on Swissphone DiCal-RED 4009 devices allows an authenticated attacker to gain access to arbitrary files on the device's file system.

Affected products

• Swissphone Dical-Red: version 4009 only

Published 2024-08-22. Last modified 2026-06-17.