CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!
CVE-2024-57055: Server-Side Access Control Bypass vulnerability in WombatDialer before 25.02 could allow unauthorized users to potentially call certain services...
Description
Server-Side Access Control Bypass vulnerability in WombatDialer before 25.02 could allow unauthorized users to potentially call certain services without the necessary access level. This issue is limited to services used by the client (not the general-use JSON services) and requires reverse engineering of the proprietary serialization protocol, making it difficult to exploit.
Classification
CVE ID: CVE-2024-57055
Affected Products
Vendor: n/a
Product: n/a
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.03% (probability of being exploited)
EPSS Percentile: 6.34% (scored less or equal to compared to others)
EPSS Date: 2025-03-19 (when was this score calculated)