What is CVE-2024-57055?

CVE-2024-57055 is a medium-severity vulnerability in N/a, classified under Missing Authentication for Critical Function. CVSS score: 5.0/10. Published 2025-02-18.

How severe is CVE-2024-57055?

Medium severity. CVSS v3 base score is 5.0 out of 10.

Auth bypass in N/a

CVE-2024-57055

Server-Side Access Control Bypass vulnerability in WombatDialer before 25.02 could allow unauthorized users to potentially call certain services without the necessary access level. This issue is limited to services used by the client (not the general-use JSON services) and requires reverse engineering of the proprietary serialization protocol, making it difficult to exploit.

Vulnerability class: Broken Authentication

EPSS: 0.003 (17.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.0 (Medium). Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L.

Affected products

N/a — versions n/a

Weakness classification (CWE)

CWE-306 — Missing Authentication for Critical Function

References

cve@mitre.org

Frequently asked questions

What is CVE-2024-57055?: CVE-2024-57055 is a medium-severity vulnerability in N/a, classified under Missing Authentication for Critical Function. CVSS score: 5.0/10. Published 2025-02-18.
How severe is CVE-2024-57055?: Medium severity. CVSS v3 base score is 5.0 out of 10.