Critical severity9.9NVD Advisory· Published Sep 19, 2024· Updated Jul 5, 2026

CVE-2024-33109

Description

Directory Traversal in the web interface of the Tiptel IP 286 with firmware version 2.61.13.10 allows attackers to overwrite arbitrary files on the phone via the Ringtone upload function.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Ergophone/Tiptel IP 286 Firmware
cpe:2.3:o:ergophone:tiptel_ip_286_firmware:*:*:*:*:*:*:*:*
Range: <=2.61.13.10
Yealink/Sip T28p Firmware
cpe:2.3:o:yealink:sip-t28p_firmware:*:*:*:*:*:*:*:*
Range: <=2.61.13.10
Tiptel/IP 286cpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: 2.61.13.10

Patches

Vulnerability mechanics

References

www.bdosecurity.de/en-gb/advisories/cve-2024-33109nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.643
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000