CVE-2024-36441: Improper Access Control
Source CVE Database V5
Not known to be exploited · CVSS 5.4 Medium.
Data as of 26 Oct 2026, 14:05 UTC
- EPSS
- 0.3% chance of exploitation in 30 days – higher than 27% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:LExploitation evidence
Disclosed: evidence found.
CVE published 22 Aug 2024
Detectable: no evidence on record.
No public nuclei template indexed
Weaponised: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.
What to do
AI-suggested
- Immediately restrict network access to TCP port 2101 on Swissphone DiCal-RED 4009 devices using firewalls or network segmentation to limit exposure to trusted management networks only.
- Implement strict access control lists (ACLs) to prevent unauthorized connections from untrusted sources.
- Monitor network traffic for unusual or unauthorized connections to port 2101 and establish alerting mechanisms for suspicious activity.
- Engage with Swissphone or authorized vendors to obtain guidance on patches or firmware updates addressing this vulnerability as they become available.
- Consider deploying intrusion detection/prevention systems (IDS/IPS) tuned to detect exploitation attempts targeting this vulnerability.
- Conduct regular security audits and penetration testing focused on device communication channels to identify and remediate similar weaknesses.
- Educate operational staff about the risks of exposing device management ports and enforce strict operational security policies.
- Where possible, isolate critical communication devices on dedicated, secure networks with limited external access.
Description
Swissphone DiCal-RED 4009 devices allow an unauthenticated attacker use a port-2101 TCP connection to gain access to operation messages that are received by the device.