PT-2025-6738 · Unknown · Wombatdialer

Aleksandr Rudkovskii + 1 · Published 2025-02-18 · Updated 2025-02-19 · CVE-2024-57055

Positive Technologies (AI Summary)

CVSS v3.1

5.0

Medium

Base vector

AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions WombatDialer versions prior to 25.02

Description A Server-Side Access Control Bypass issue could allow unauthorized users to potentially call certain services without the necessary access level. This issue is limited to services used by the client and requires reverse engineering of the proprietary serialization protocol, making it difficult to exploit.

Recommendations For versions prior to 25.02, update to version 25.02 or later to resolve the issue. As a temporary workaround, consider restricting access to services used by the client to minimize the risk of exploitation.

Fix

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2024-57055

Affected Products

Wombatdialer

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2024-57055 · Security Note
• https://wombatdialer.com/blog/blog/2025/02/18/CVE · Note
• https://twitter.com/CVEnew/status/1891928706224095595 · Twitter Post
• https://t.me/cvenotify/111840 · Telegram Post
• https://t.me/cvedetector/18344 · Telegram Post