CVE-2024-57055

Summary

CVE-2024-57055 is a server-side access control bypass vulnerability affecting WombatDialer versions prior to 25.02. This issue enables unauthorized users to potentially access certain services without the required access level. However, it's important to note that this vulnerability is limited to services utilized by the client and not the general-use JSON services. Additionally, exploiting this weakness requires reverse engineering of the proprietary serialization protocol, making it a challenging target for attackers.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.