Security Advisory
CVE-2024-36440
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
An issue was discovered on Swissphone DiCal-RED 4009 devices. An attacker with access to the file /etc/deviceconfig may recover the administrative device password via password-cracking methods, because unsalted MD5 is used.