CVE-2024-36441: n/a
Source CVE Database V5
Not known to be exploited · CVSS 5.4 Medium.
Data as of 26 Oct 2026, 06:26 UTC
- EPSS
- 0.3% chance of exploitation in 30 days – higher than 27% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:LExploitation evidence
Disclosed: evidence found.
CVE published 22 Aug 2024
Detectable: no evidence on record.
No public nuclei template indexed
Weaponised: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 2026-10-26.
What to do
AI-suggested
1. Immediately restrict network access to TCP port 2101 on Swissphone DiCal-RED 4009 devices using firewalls or network segmentation to limit exposure to trusted management networks only. 2. Implement strict access control lists (ACLs) to prevent unauthorized connections from untrusted sources. 3. Monitor network traffic for unusual or unauthorized connections to port 2101 and establish alerting mechanisms for suspicious activity. 4. Engage with Swissphone or authorized vendors to obtain guidance on patches or firmware updates addressing this vulnerability as they become available. 5. Consider deploying intrusion detection/prevention systems (IDS/IPS) tuned to detect exploitation attempts targeting this vulnerability. 6. Conduct regular security audits and penetration testing focused on device communication channels to identify and remediate similar weaknesses. 7. Educate operational staff about the risks of exposing device management ports and enforce strict operational security policies. 8. Where possible, isolate critical communication devices on dedicated, secure networks with limited external access.
Description
Swissphone DiCal-RED 4009 devices allow an unauthenticated attacker use a port-2101 TCP connection to gain access to operation messages that are received by the device.