CVE Feed

    Dashboard / CVE / CVE-2024-26155

    CVE-2024-26155

    All versions of ETIC Telecom Remote Access Server (RAS) prior to 4.5.0 expose clear text credentials in the web portal. An attacker can access the ETIC RAS web portal and view the HTML code, which is configured to be hidden, thus allowing a connection to the ETIC RAS ssh server, which could enable an attacker to perform actions on the device.

    Published:Jan 17, 2025
    Last Modified:Jul 30, 2025
    EPS:Jan 17, 2025
    EPSS Score:0.00045
    CVSS Score:6.8

    Affected Products

    Vendor
    Etictelecom
    Product
    Remote Access Server Firmware

    Exploits

    No exploit reference

    Related CVEs

    CVE-2024-26153 (CVSS 6.3) — All versions of ETIC Telecom Remote Access Server (RAS) prior to 4.9.19 are vulnerable to cross-site request …
    CVE-2024-26154 (CVSS 4.8) — All versions of ETIC Telecom Remote Access Server (RAS) prior to 4.5.0 are vulnerable to reflected cross site…
    CVE-2024-26157 (CVSS 5.3) — All versions of ETIC Telecom Remote Access Server (RAS) prior to 4.5.0 are vulnerable to reflected cross site…
    CVE-2024-26156 (CVSS 4.8) — All versions of ETIC Telecom Remote Access Server (RAS) prior to 4.5.0 are vulnerable to reflected cross site…
    CVE-2023-3453 (CVSS 7.1) — ETIC Telecom RAS versions 4.7.0 and prior the web management portal authentication disabled by default. This …
    CVE-2022-3703 (CVSS 7.6) — All versions of ETIC Telecom Remote Access Server (RAS) 4.5.0 and prior’s web portal is vulnerable to acceptin…
    CVE-2022-40981 (CVSS 5.9) — All versions of ETIC Telecom Remote Access Server (RAS) 4.5.0 and prior is vulnerable to malicious file upload…
    CVE-2022-41607 (CVSS 6.2) — All versions of ETIC Telecom Remote Access Server (RAS) 4.5.0 and prior’s application programmable interface (…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High