CVE-2024-33109

—

CVSS 3.1

9.8 critical

EPSS

<1%p56

Published

Sep 19, 2024 (Sep 19, 2024)

Modified

Jul 5, 2026

Description

Directory Traversal in the web interface of the Tiptel IP 286 with firmware version 2.61.13.10 allows attackers to overwrite arbitrary files on the phone via the Ringtone upload function.

Vendors: ergophone yealink
Products: tiptel ip 286 firmware, sip-t28p firmware
Weakness: CWE-22
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.9%)

In the news0 stories

No ingested article mentions this CVE yet.