CVE-2021-35336

CRITICAL NUCLEI

Tieline IP Audio Gateway <2.6.4.8 - Privilege Escalation

Title source: llm

Exploitation Summary

CVE-2021-35336 has a Nuclei detection template available — see the Nuclei card below for the Shodan/FOFA recon queries.

Description

Tieline IP Audio Gateway 2.6.4.8 and below is affected by Incorrect Access Control. A vulnerability in the Tieline Web Administrative Interface could allow an unauthenticated user to access a sensitive part of the system with a high privileged account.

Nuclei Templates (1)

Tieline IP Audio Gateway <=2.6.4.8 - Unauthorized Remote Admin Panel Access

CRITICALby Pratik Khalane

References (1)

Core 1

Core References

Exploit, Third Party Advisory x_refsource_misc

https://pratikkhalane91.medium.com/use-of-default-credentials-to-unauthorised-remote-access-of-internal-panel-of-tieline-c1ffe3b3757c

Scores

CVSS v3 9.8

EPSS 0.1159

EPSS Percentile 95.5%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-1188

Status published

Products (1)

tieline/ip_audtio_gateway_firmware < 2.6.4.8

Published Jul 01, 2021

Tracked Since Feb 18, 2026